Payload ransomware group lists myipo.gov.my on its leak site

• Ransomware group: Payload
• Country: Malaysia
• Sector: Government & Defense
• Announcement date: June 13, 2026

The Intellectual Property Corporation of Malaysia (MyIPO) has been listed on a leak site by the threat actor known as Payload. The announcement, which surfaced on June 13, 2026, involves a claim of a data breach targeting the Malaysian government agency.

The claimed attack and event details

The Payload group has officially listed the domain myipo.gov.my on its leak site, alleging that a data breach has occurred involving the organization. According to the announcement published on June 13, 2026, the group claims to have obtained data related to the intellectual property services provided by the agency.

Ransomware groups often utilize leak sites to apply pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not just encrypt an organization's systems to disrupt operations; they also steal sensitive information. The threat of leaking this stolen data on a public platform is used as leverage to coerce the victim into paying a ransom. While the listing on a leak site is a significant indicator of interest from threat actors, it is important to note that these claims are made by the attackers and require independent verification.

Data involved in the claim

Regarding the specifics of the alleged breach, the group has not provided detailed information concerning the content of the leaked data. The information currently available from the leak site consists of a screenshot containing a text that summarizes the general activities of the organization rather than providing a breakdown of stolen files.

The listing does not specify the following details:

• The total size of the claimed data
• The specific count of files involved
• The amount of the ransom demand

Because the group has not released specific details regarding the content of the leaked data, the exact nature of the information at risk remains unconfirmed.

About the Intellectual Property Corporation of Malaysia

The Intellectual Property Corporation of Malaysia (MyIPO) is the official government agency responsible for the registration and protection of intellectual property rights. Its mandate includes managing the rights for patents, copyrights, trademarks, and industrial designs. By securing the rights of creators and innovators, MyIPO manages the country's intellectual property system to ensure the protection of creative and inventive works.

Risk assessment and implications

This claim may pose a risk of exposure for sensitive intellectual property data, such as patents, copyrights, and trademarks held by the organization. Given that the organization provides public services, the verification of these breach claims could create risks regarding the security of citizen and business data. Such a breach might damage the organization's reputation and create challenges in regulatory compliance.

Furthermore, there are secondary risks associated with such claims. The potential use of leaked data in targeted phishing attacks or corporate espionage activities is a significant concern for organizations in the government and defense sector. When sensitive information is exposed, attackers can use those details to craft highly convincing social engineering campaigns to target specific individuals or entities.

For organizations operating in the public sector, maintaining robust security postures is essential. Common defensive steps include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training for employees. Additionally, organizations often rely on continuous monitoring and incident response plans to mitigate the impact of potential breaches and ensure compliance with data protection regulations.

Summary of the threat actor

Information regarding the Payload group remains limited in the public domain, making it difficult to determine their specific tactics, techniques, and procedures (TTPs) at this time.