PLN
dragonforceThis record tracks a ransomware attack claimed by the dragonforce group against PLN. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
Core business is the supply of electricity, especially in generation, transmission and distribution. Obtaining the task of electrifying all over the archipelago, PLN has the obligation to increase installed capacity for power supply and the development of electricity infrastructure such as transmission networks, substations, and distribution networks. At all times, we continue to improve ourselves and improve services, considering that electricity is a basic infrastructure need that will create a multiplier effect for the progress of the Indonesian economy. Our business continues to expand into various business sectors through subsidiaries, associated entities, joint ventures, and special purpose vehicles (SPV) under the auspices of the PLN Group. Through the implementation of SOLID (Securing Business Sustainability, Optimizing Cost Efficiency, Leading Industry Capabilities, Increasing Profit Contribution and Developing New Edge) business portfolios, we will continue to develop services to become a World Class Electricity Company.
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.