Platinumone.in listed on Benzona ransomware leak site

• Ransomware group: Benzona
• Country: India
• Sector: Technology
• Announcement date: December 6, 2025

Benzona claims to have compromised platinumone.in

The threat actor known as Benzona has officially listed the Indian technology firm platinumone.in on its ransomware leak site. According to the announcement made on December 6, 2025, the group claims to have successfully compromised the organization's systems and exfiltrated a significant amount of data. This incident follows a common pattern in modern cyber extortion, where attackers target specific organizations to demand payment in exchange for not releasing sensitive information.

The announcement, which is categorized as a data breach, indicates that the attack occurred on the same day the claim was posted, December 6, 2025. This rapid timeline between the alleged intrusion and the public listing is a tactic often used by ransomware groups to maximize pressure on the victim organization.

Details of the alleged extortion and ransom demand

The Benzona group has stated that they have obtained a massive volume of information from the target. Specifically, the threat actor claims to have exfiltrated 800 GB of data from the systems belonging to platinumone.in. This large volume of data suggests a significant breach of the organization's digital environment.

In addition to the claim of data theft, the group has issued a formal ransom demand. The threat actor is requesting a payment of $200,000 to prevent the further dissemination of the stolen information. This type of double extortion—where data is both encrypted and stolen—is a growing trend in the ransomware landscape. In these scenarios, attackers use the threat of leaking sensitive information to coerce organizations into paying, even if the organization has robust backups to restore their systems.

Despite the large volume of data claimed, the listing provides very little detail regarding the specific nature of the alleged stolen data; furthermore, no screenshot has been provided to verify the contents of the breach.

Organization profile

PlatinumOne is an Indian company providing customer experience management, business process outsourcing (BPO), and digital engagement solutions. The company focuses on customer acquisition, service operations, and the digitalization of sales processes.

Risk assessment and potential implications

This incident may pose a risk to the organization's operational continuity and data privacy. Depending on the nature of the compromised data, secondary risks such as identity theft and targeted phishing attacks against employees or customers could emerge. The organization may face legal obligations under Indian data protection regulations.

Information regarding the Benzona group is limited, making it difficult to attribute the attack to a specific known entity or to predict their future behavior. If the ransom demand is not met, the possibility of the data being published or sold on public platforms should be considered.

For organizations operating in the technology and BPO sectors, incidents like this highlight the critical importance of robust cybersecurity frameworks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits. Furthermore, monitoring for unauthorized data exfiltration and maintaining a rapid incident response plan are essential components of a modern defense strategy. As attackers continue to target service providers that handle client data, the potential for cascading effects on a company's client base remains a significant concern for the industry at large.