Palmgold Management Sdn Bhd listed on crypto24 leak site

• Ransomware group: crypto24
• Country: Malaysia
• Sector: Hospitality
• Announcement date: August 18, 2025

Crypto24 claims data exfiltration from Palmgold Management Sdn Bhd

The threat actor group known as crypto24 has claimed to have exfiltrated a significant amount of data from Palmgold Management Sdn Bhd. According to an announcement made on a ransomware leak site, the group alleges they have successfully stolen over 500 GB of information belonging to the organization.

The incident was officially announced on the group's leak site on August 18, 2025. While the announcement confirms the listing of the organization, no screenshot was provided by the attackers to substantiate their claims. Information regarding the specific identity and background of the crypto24 group remains limited.

Details of the alleged breach

The crypto24 group claims to have gained unauthorized access to the internal network of Palmgold Management Sdn Bhd on August 5, 2025. This timeline suggests that the attackers maintained presence within the network for approximately thirteen days before the public announcement was made on their leak site.

The group alleges that the breach was not limited to a single department but instead spanned multiple operational areas. Specifically, the attackers claim to have obtained sensitive operational and financial data from both the casino and the credit divisions of the company. This dual-sector targeting suggests a broad reach into the organization's core business functions.

Alleged stolen data types

The data allegedly stolen by the threat actors is vast and covers various sensitive categories. The group claims the exfiltrated information includes:

• Personally identifiable information (PII) of casino members
• Gaming history and betting patterns
• Financial records and banking information
• Cash transaction records
• Human resources (HR) documents
• IT files and scanner contents
• Customer KYC (Know Your Customer) information from the credit division
• Operational risk and fraud detection criteria

About Palmgold Management Sdn Bhd

Palmgold Management Sdn Bhd is a company based in Malaysia. The organization operates within the hospitality sector, specifically focusing on casino management and credit services. Their business model is centered around casino operations and the management of financial credit.

Risk assessment and industry implications

The nature of the data allegedly exfiltrated poses significant risks to the organization and its clientele. For the customers of Palmgold Management Sdn Bhd, the exposure of personally identifiable information, gaming history, and banking records creates a high risk of identity theft and financial fraud. Furthermore, the alleged theft of operational risk and fraud detection criteria is particularly damaging, as it could lead to a loss of competitive advantage and provide a roadmap for secondary cyberattacks against the firm.

The organization may also face legal repercussions under Malaysian data protection regulations due to the sensitive nature of the leaked information. This incident highlights the growing trend of double extortion tactics, where threat actors not only encrypt systems but also threaten to publish or sell stolen data to maximize their leverage. In such scenarios, the risk of data being leaked to the public or sold on dark web forums remains a significant concern.

For organizations operating in the hospitality and financial services sectors, this event underscores the necessity of robust security postures. Common defensive steps for companies to mitigate such risks include implementing strict network segmentation to prevent lateral movement, enforcing multi-factor authentication, and maintaining rigorous monitoring of data egress to detect unauthorized exfiltration. Additionally, organizations must be prepared to follow regulatory requirements regarding the notification of affected parties when a breach occurs.