International Assistance Sdn listed on lamashtu ransomware leak site

• Ransomware group: lamashtu
• Country: Malaysia
• Sector: Professional Services
• Announcement date: April 13, 2026

Lamashtu claims breach of International Assistance Sdn

The lamashtu ransomware group has listed the Malaysian healthcare service provider International Assistance Sdn on its dedicated leak site. According to the announcement made on April 13, 2026, the threat actors claim to have successfully compromised the institution's systems and exfiltrated a significant volume of sensitive information.

The group asserts that the stolen dataset is substantial, consisting of approximately 250 GB of data and comprising roughly 60,000 files. The threat actors further claim that the information contained within this breach covers operational records spanning from 2023 to 2026. While the group has published this information on their leak site, no ransom demand has been specified in the announcement.

Details of the claimed data exfiltration

The data allegedly stolen by the lamashtu group includes a wide variety of sensitive documents. Based on sample images shared by the attackers in their post, the breach involves highly personal information that could be used for malicious purposes. The leaked content reportedly includes various forms of identification and financial documentation.

The specific types of data identified in the listing include:

• Patient health records
• Identity documents
• Insurance information
• Employee payroll records
• Banking details

The presence of such diverse documentation, ranging from medical records to banking details, highlights the potential severity of the exposure. In many modern ransomware attacks, actors utilize a tactic known as double extortion. In this scenario, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten the victim with public disclosure unless a ransom is paid. This increases the pressure on the victim, as the leak of private data can lead to significant reputational and legal consequences.

About International Assistance Sdn

International Assistance Sdn is a healthcare contact center and third-party administrator (TPA) infrastructure service provider located in Malaysia. The organization focuses on delivering high-standard healthcare services and providing administrative support solutions to its various customers.

Potential risks and industry implications

This alleged breach poses significant risks to the individuals involved, specifically the patients and employees served by the institution. The exposure of such sensitive information increases the likelihood of identity theft and various forms of fraud. Furthermore, because the organization handles medical information, the incident could lead to legal sanctions under Malaysia's Personal Data Protection Act (PDPA).

Because International Assistance Sdn operates as a Third-Party Administrator (TPA), this incident may also create secondary risks concerning supply chain security. When a service provider that manages data for other entities is compromised, the impact often extends beyond the initial target to the broader network of partners and clients.

For organizations operating in the healthcare and professional services sectors, maintaining robust cybersecurity defenses is critical. Common defensive strategies often involve implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training for employees. Additionally, monitoring for unauthorized data exfiltration and ensuring strong encryption for data at rest and in transit are standard practices used to mitigate the impact of such incidents. The sensitivity of the data involved in this claim may negatively impact the operational credibility of the institution involved.