Wawasan Dengkil Sdn Bhd listed on bert ransomware leak site

• Ransomware group: bert
• Country: Malaysia
• Announcement date: May 22, 2025

A new data breach claim against Wawasan Dengkil Sdn Bhd

The threat actor group known as bert has listed the Malaysian construction company Wawasan Dengkil Sdn Bhd on its dedicated leak site. According to the announcement made on May 22, 2025, the group claims to have successfully carried out an intervention against the company's digital assets. This development follows a pattern often seen in modern cyberattacks where threat actors target specific organizations to extract sensitive information for extortion purposes.

The announcement suggests that the group is not merely conducting a standard data theft but is actively engaging in a campaign against the organization. The group has publicly criticized the company's response to the alleged breach. Furthermore, the threat actor has indicated that the stolen data will not be released all at once; instead, the group has stated they will release the information in stages, a tactic frequently used to maintain continuous pressure on the victim.

Details of the alleged data theft

While the specific volume of the stolen data and the exact number of files involved remain unknown, the group has provided visual evidence to support their claims. Screenshots released by the group display various types of sensitive corporate and personal documentation. These samples indicate that the breach has compromised a wide range of internal administrative and operational records.

The types of data identified in the leaked samples include:

• Employee personal data
• Financial invoices
• Job application forms
• Corporate correspondence

The presence of such diverse documentation—ranging from employment-related forms to financial records—suggests a significant compromise of the company's internal filing systems and communication channels.

About Wawasan Dengkil Sdn Bhd

Wawasan Dengkil Sdn Bhd is a professional organization based in Malaysia. Founded in 2003, the company has established a presence in the construction sector. The firm specializes in several key areas of the industry, including earthworks, civil engineering, and the supply of building materials. Additionally, the company provides equipment rental services to support its various construction and engineering projects.

Risk assessment and potential impact

The leak of these specific documents carries significant risks for both the organization and the individuals involved. The exposure of employee personal data and job application forms significantly increases the risk of identity theft. Furthermore, the availability of financial invoices and corporate correspondence creates a heightened risk for targeted phishing attacks against the company's employees and its business partners.

From a business perspective, the sensitivity of the shared documents could lead to negative impacts on the company's commercial reputation and its overall operational security. Additionally, the company may face legal liabilities under Malaysia's Personal Data Protection Act (PDPA) due to the exposure of protected information. The threat actor's strategy of releasing data in stages is a known double-extortion tactic, designed to maximize leverage over the victim by creating a sense of ongoing crisis.

In such scenarios, organizations typically face the challenge of managing both the technical recovery of their digital assets and the legal and reputational fallout. While information regarding the bert group remains limited in the public domain, the nature of their announcement highlights the evolving complexity of ransomware-related extortion campaigns.