Elken Sdn Bhd data allegedly leaked by medusalocker
The medusalocker group claims to have leaked data belonging to Elken Sdn Bhd. It is alleged that approximately 16,000 email addresses have been compromised.
- Published
- 2 min read
- 2 min read
- Ransomware group: medusalocker
- Country: Malaysia
- Sector: Retail & E-Commerce
- Announcement date: May 5, 2026
Medusalocker claims to have leaked Elken Sdn Bhd data
The ransomware group known as medusalocker has announced on its leak site that it has leaked data belonging to the Malaysian-based organization Elken Sdn Bhd. According to the claims made by the threat actor, the group managed to gain unauthorized access to the organization's systems and subsequently exfiltrated specific files.
This type of announcement is characteristic of modern ransomware operations, often referred to as double extortion. In these scenarios, attackers do not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to release stolen data on public leak sites, ransomware groups aim to pressure victims into paying a ransom to prevent the exposure of confidential information.
Details of the alleged breach
The medusalocker group's announcement suggests that the breach involves specific datasets. While the group has not provided information regarding the total size of the data or the specific number of files taken, they have made claims regarding the content of the exfiltrated information. Specifically, the group alleges that approximately 16,000 email addresses have been compromised during the attack.
Visual evidence provided by the group, such as screenshots, reportedly shows a folder structure named 'sorted', which suggests an organized approach to the data exfiltration process. The specific categories of data identified in the listing include:
- Email addresses
It is important to note that no information was provided regarding a ransom demand in the current announcement.
About Elken Sdn Bhd
Elken Sdn Bhd is a multi-level marketing (MLM) company based in Malaysia. The organization focuses on the production and sale of health, beauty, and personal care products. Since its founding in 1995, the company has established a significant presence in the Asian market, offering a wide range of products to its consumer base.
Security implications and risks
This alleged breach may significantly increase the risk of phishing attacks targeting both the employees and the customers of Elken Sdn Bhd. When email addresses are leaked, they often serve as a primary entry point for secondary attacks, such as highly targeted spear-phishing or credential harvesting attempts. Attackers can use these addresses to craft convincing messages to further penetrate the network or to conduct fraudulent activities against the individuals involved.
Furthermore, the organization may face legal obligations under the Malaysian Personal Data Protection Act (PDPA) due to the potential exposure of personal information. Organizations operating in the retail and e-commerce sectors, particularly those handling large customer databases, should prioritize reviewing their data security processes and consider notifying the affected parties to mitigate potential harm.
Defensive measures for organizations include implementing multi-factor authentication (MFA) across all systems, maintaining rigorous patch management schedules, and conducting regular security awareness training for employees to recognize phishing attempts. Additionally, monitoring for unauthorized data exfiltration and maintaining robust, offline backups are essential components of a comprehensive cybersecurity posture.