GLOBALMalwareHospitalityRansomwareCrypto24Ransom DemandedActor NamedMedium
Bayu Buana Travel Service
bd_f33de39a565c9ffe · schema v1 · pii pii-v1
Full breach record for Bayu Buana Travel Service →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Crypto24 on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Group activity: Hospitality and TourismDiscovered: 2025-11-15
Source: Ransomware.live
Post text · scraped from the leak site
We have successfully extracted over 500GB of documents from your internal network, including internal company documents, customer and project information, and other data stored within your internal systems.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident
No regulatory filing corroborates this yet. If an SEC 8-K, state-AG notice, or victim statement lands, DisclosureLens will merge it into an incident and link it here.
Source provenance
- Source URL
- https://www.ransomware.live/id/QmF5dSBCdWFuYSBUcmF2ZWwgU2VydmljZUBjcnlwdG8yNA==
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 20, 2025
- Raw hash
- cb861337978cb8c9c689ebd51bd1ac6e559360cba4d81b1c2063aeed417409e3
Reporting entity
- Name
- crypto24
Victim entity
- Name
- Bayu Buana Travel Servicenorm: bayu buana travel service
- Domain
- bayubuanatravel.com
- Industry
- Hospitalityllm
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· crypto24
- Threat actor
- Crypto24ExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.