Rhysida Ransomware Gang Claims Attack on Malaysian Shipping Group MISC
Rhysida listed MISC Group on its leak site on 26 October, claiming 28.4 GB including crew personal data and shipboard credentials. MISC has not commented.
The Rhysida ransomware group has listed MISC, the Malaysian maritime energy shipping group whose main shareholder is Petronas, on its leak site, claiming 29,841 files totalling 28.4 GB. The ransomware.live tracker recorded the listing on 26 October. MISC hadn't made any public statement about it by 29 October.
What Rhysida says it took
The post claims crew personal data and shipboard system and account credentials. It also lists mail archives from command workstations, internal investigation reports, and drydock and charter documents. Threat-intelligence site DeXpose, which summarised the post, says the crew files include passport numbers, dates of birth, home addresses and salaries.
None of this has been verified. The tracker's entry shows no ransom figure, no deadline and no sign that the data has been published or put up for sale.


