First Resources listed on RansomHouse leak site

• Ransomware group: RansomHouse
• Country: Singapore
• Sector: Agriculture and Food Production
• Announcement date: November 6, 2025

The ransomware group known as RansomHouse has listed the Singapore-based organization First Resources on its leak site. According to the group's announcement, they claim to have successfully exfiltrated 2.2 TB of data from the company's systems.

Details of the alleged attack

The threat actor known as RansomHouse has published a listing for First Resources, alleging that a significant data breach has occurred. In their announcement, the group makes a serious allegation, claiming that the company's IT department attempted to conceal the incident from public knowledge. This alleged attempt at concealment is cited by the group as the primary reason for their decision to proceed with a public disclosure on their leak site.

Regarding the timeline of the cyberattack, the announcement states that the activities involving both encryption and data exfiltration took place on February 28, 2025. RansomHouse, which has been known to be active since 2021, primarily utilizes tactics focused on data exfiltration and extortion to pressure their targets. This type of double extortion tactic involves not only locking the victim's systems but also threatening to release sensitive information to the public to increase leverage during negotiations.

Compromised information

The leak announcement claims that a variety of sensitive materials have been compromised during the breach. The group alleges that the stolen information includes highly sensitive corporate assets that could impact the company's operations and intellectual property. Specifically, the group claims to have obtained the following types of data:

• Development projects
• Source code
• Confidential corporate data

While the group has specified the volume of data as 2.2 TB, no specific information was provided regarding the total file count or the specific amount of a ransom demand.

About First Resources

First Resources Limited is a Singapore-based agricultural company specializing in the cultivation and processing of oil palms. The company manages an integrated supply chain ranging from the harvesting of palm fruits to the production of crude palm oil and value-added products such as biodiesel.

Risk assessment and industry implications

This incident suggests a significant risk of exposure for sensitive corporate data and intellectual property belonging to First Resources. The alleged compromise of source code and project documentation may create opportunities for secondary attacks against the company's operational infrastructure, as stolen code can be analyzed to find further vulnerabilities.

Given that the company is headquartered in Singapore, the incident is likely to trigger legal scrutiny under local data protection regulations. Furthermore, the exfiltrated data may pose risks to the security of the company's entire supply chain. For organizations operating in the agriculture and food production sector, such incidents highlight the critical importance of securing digital assets that underpin physical supply chains.

To defend against such threats, organizations typically focus on robust defensive measures. These include maintaining rigorous patch management to close vulnerabilities, implementing multi-factor authentication across all access points, and conducting regular offline backups to ensure data can be restored without paying a ransom. Additionally, monitoring for unauthorized data exfiltration and implementing strict access controls for sensitive source code and project files are essential components of a modern cybersecurity posture.