dinamalar.com Listed by funksec Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 17 December 2024, the website dinamalar.com was listed by the ransomware group funksec. Public reporting states that internal files were exfiltrated in a ransomware attack. The number of people affected remains unknown, and further technical details of the incident have not been disclosed.

Because dinamalar.com is the online presence of a major Tamil-language newspaper serving readers in India and the diaspora, any compromise of internal systems raises questions about the security of operational data and the potential exposure of information held by a news organisation. At present the listing itself is the primary public claim; independent confirmation of the full scope is limited.

Inside the incident

According to the available record, dinamalar.com appeared on a funksec leak-site listing dated 17 December 2024. The group claims that internal files were taken during a ransomware attack. No public information has been released about the precise date of intrusion, the initial access method, the volume of data involved, or whether encryption was also deployed against systems. The number of individuals whose information may have been affected is listed as unknown. Beyond the assertion of file exfiltration, no further verified technical indicators or victim statements have been included in the public summary.

Who is funksec?

Funksec is a ransomware operation that has appeared in public threat reporting as a group that conducts double-extortion attacks: encrypting systems while also stealing data and threatening to publish it if a ransom is not paid. Like other contemporary ransomware actors, the group maintains a leak site on which it posts victim names and, in some cases, samples of stolen material to pressure organisations. Public analyses describe funksec as relatively recent compared with longer-established ransomware brands, yet it has followed the familiar pattern of targeting a range of sectors and advertising claimed breaches online. Any specific statements the group has made about dinamalar.com beyond the listing itself remain unverified claims rather than independently What's Publicly Reported.

Who is dinamalar.com?

Dinamalar is a long-standing Tamil-language daily newspaper based in India. Founded in 1951 by T. V. Ramasubbaiyer, it has become one of the leading publications in Tamil Nadu, covering politics, sports, entertainment, international affairs and local news. Its digital arm, dinamalar.com, extends that coverage to a global Tamil-speaking audience with continuously updated content. News organisations of this type typically maintain internal systems for editorial workflows, subscriber or reader databases, advertising records, employee information, and operational documents. A breach affecting such an entity is consequential because it can touch both the continuity of a public-information service and the personal or commercial data that media companies routinely process.

What was likely exposed

The public facts state only that internal files were exfiltrated. No inventory of specific data categories—such as employee records, subscriber details, source material, financial documents or credentials—has been released. Organisations in the newspaper sector commonly hold staff contact and payroll information, reader or subscription data, advertising contracts, editorial drafts and internal correspondence. Whether any of those categories were among the files taken in this incident remains unconfirmed. Until a fuller disclosure or forensic summary appears, the exact contents of the exfiltrated material cannot be stated as fact.

The real-world impact

For individuals whose information may have been present in internal files, possible consequences include unwanted contact, phishing attempts that reference legitimate organisational details, or identity-related misuse if personal identifiers were included. For the organisation itself, the incident can disrupt internal operations, require costly recovery and forensic work, and affect trust among readers, advertisers and staff. Because the scale of the breach and the precise data types remain unknown, the concrete level of risk for any given person cannot yet be quantified; the primary public signal is simply that a ransomware group has claimed possession of internal material.

If your data was in this claimed breach

If you have had any relationship with dinamalar.com—as a subscriber, employee, contributor or business partner—treat the possibility of exposure seriously even while details stay limited. Change passwords associated with any accounts that may have been linked to the organisation, enable multi-factor authentication wherever available, and monitor financial and email accounts for unusual activity. Be alert to phishing messages that appear to come from the newspaper or that reference personal details you may have shared with it. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach datasets, providing an additional early-warning step while official notifications, if any, are still pending.

AICompiled with AI assistance from public sources and published under our editorial standards.