Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo Darma Henwa

Group: Spacebears

Discovered by ransomware.live: 2026-02-16

Estimated attack date: 2026-02-15

Country: ID

Description:

PT Darma Henwa Tbk -  established in 1991, is a company that specializes in mining support and excavation activities. It provides services such as metal fabrication, machinery repair, and equipment leasing. The company also engages in road and railroad construction, as well as building and civil construction. Initially a domestic investment firm, Darma Henwa became a foreign investment company in 1996 and went public in 2007.- Employee personal data- Contracts and client information- Financial reports and audits- Projects and developments- Outlook emails- Internal security reports https://www.ptdh.co.id/



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • ptdh-co-id.mail.protection.outlook.com.
TXT Records
  • MS=ms26054432
  • v=spf1 ip4:203.153.122.32/28 include:spf.protection.outlook.com ~all
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot