PJSI Consultants SDN BHD listed by Genesis ransomware group
The threat actor known as Genesis has listed PJSI Consultants SDN BHD., a Malaysia-based firm, on its leak site, claiming to possess 3.5 TB of their data.
- Published
- 2 min read
- 2 min read
- Ransomware group: Genesis
- Country: Malaysia
- Sector: Professional Services
- Announcement date: December 1, 2025
Genesis ransomware group claims data breach at PJSI Consultants SDN BHD
The threat actor known as Genesis has listed the Malaysia-based firm PJSI Consultants SDN BHD on its leak site. According to the announcement made on December 1, 2025, the group claims to be in possession of a significant volume of data belonging to the organization, totaling 3.5 TB.
Details of the alleged data exfiltration
The Genesis group alleges that the organization's data has been compromised through a targeted attack. The threat actor claims to hold a 3.5 TB dataset, which is reportedly said to have been exfiltrated from the company's network-attached storage (NAS) devices. This method of targeting storage devices is a common tactic in modern cyberattacks, as these devices often contain vast repositories of critical organizational information.
The announcement suggests that the stolen information includes sensitive documents related to the company's various projects and its broader commercial operations. The specific types of data the group claims to have acquired include:
- Project data
- Technical blueprints
- Sales and proposal documents
- Accounting records
- Contracts
- Non-disclosure agreements
While the group has made these claims on their leak site, no specific ransom demand has been disclosed in the public announcement.
About PJSI Consultants SDN BHD
PJSI Consultants SDN BHD is an architecture and design firm based in Malaysia. The company provides architectural and design services for various projects in both the public and private sectors, making it a provider of essential professional services within the region.
Potential impact and industry implications
The potential exposure of the company's trade secrets and intellectual property may negatively impact its competitive position. The disclosure of contracts and non-disclosure agreements (NDAs) could lead to a loss of trust among clients and business partners, potentially triggering legal consequences. Furthermore, the leaked data may pose risks related to identity theft or targeted phishing campaigns.
The organization may also face scrutiny regarding its data security obligations under Malaysia's Personal Data Protection Act (PDPA). In the professional services sector, where client confidentiality is paramount, such breaches can have long-lasting effects on reputation and operational stability. It is worth noting that information regarding the Genesis group remains limited; therefore, a definitive assessment of the group's operational capacity and motivation cannot be made.
In general, ransomware attacks often follow a