Kumpulan Prasarana Rakyat Johor (KPRJ), the state-owned infrastructure and property development company of Johor, Malaysia, has allegedly been compromised in a significant data breach. The company, which serves as a primary executive arm for the Johor state government, manages large-scale construction projects, multi-million dollar contracts, and strategic state land developments. The breach was reportedly carried out by an unidentified party who is now offering the stolen database for sale on an underground forum for 1.5 BTC.
The allegedly compromised data includes a massive collection of files totaling 180.69 GB and comprising over 71,000 files. According to the actor, the sensitive information covers the period from 2022 to March 2025 and contains:
-
Full names and personnel photos of over 100 employees
-
Complete construction and project contracts from 2022 onwards
-
Signed agreements, priced and blank Bills of Quantities (BQs)
-
Progress reports and financial payment records for major state projects
-
Internal audit documents (Audit Negara), CMC papers, and petty cash records
-
Land valuation reports (JPPH) for major projects including Casa Tebrau and Danga
-
Internal training archives and anti-corruption webinar videos
-
Tender documents and technical proposals from telecommunications companies
Daily Dark WebRead More
R1
T1
