mydelux.com.my Listed by killsec Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to pressure organisations by combining encryption with data theft and public leak-site listings, a pattern that has become common across sectors and regions. Against that backdrop, the Malaysian domain mydelux.com.my was reported on 26 November 2024 as having been listed by the killsec ransomware group.

Public information is limited to the listing itself and the group’s claim that internal files were exfiltrated. The number of people affected remains unknown, yet any such claim raises concrete questions about the security of internal records and the potential exposure of individuals connected to the organisation.

What happened

According to available reporting, mydelux.com.my was listed on the killsec ransomware leak site on 26 November 2024. The group claims to have stolen internal data as part of a ransomware attack that involved the exfiltration of internal files. No further Reported Details have been made public regarding the precise timing of the intrusion, the technical method used, the volume of data taken, or whether any ransom demand was met. The number of people affected is unknown. All statements about the theft rest on the group’s own listing and claims; independent verification has not been disclosed.

Inside killsec

Killsec is a ransomware operation that has been observed conducting double-extortion campaigns: encrypting systems while simultaneously stealing data and threatening to publish it on a dedicated leak site if payment is not made. Like many such groups, it typically posts victim names, sample files or descriptions of the stolen material to increase pressure. Public reporting on killsec has documented a pattern of opportunistic targeting across multiple countries and industries rather than exclusive focus on any single sector. The group’s listing of mydelux.com.my constitutes a claim of successful intrusion and data theft; it does not by itself constitute independent confirmation of the full scope or impact of the incident.

Who is mydelux.com.my?

mydelux.com.my is a commercial domain registered under Malaysia’s .com.my country-code space. Public detail about the precise nature of the organisation’s operations is limited. Entities operating under such domains commonly include retail, hospitality, service or trading businesses that maintain customer records, employee information, supplier contracts and internal operational files. A breach claim against any organisation of this type is consequential because those records often contain personal and commercial data whose unauthorised disclosure can affect individuals and business relationships. Without additional public statements from the organisation itself, the exact profile of the entity remains unconfirmed beyond the domain name and the ransomware listing.

What data was at risk

The only data types named in connection with the incident are internal files said to have been exfiltrated in a ransomware attack. The killsec group claims to have stolen internal data; no further inventory—such as specific categories of personal information, financial records or customer lists—has been disclosed in the available reporting. Organisations of this general type typically hold employee details, customer contact information, transactional records and proprietary business documents. Because the exact contents remain unconfirmed, it is not possible to state with certainty which of those categories, if any, were among the files taken. The number of individuals whose information may be involved is unknown.

Why it matters

When internal files are claimed to have been stolen, the practical risks include potential misuse of personal details for fraud or social engineering, exposure of commercial information that could harm business relationships, and the possibility that credentials or other sensitive material could enable further unauthorised access. For people whose data may have been held by the organisation, the uncertainty itself creates a need for vigilance: monitoring financial accounts, watching for unexpected communications, and treating unsolicited requests for personal information with caution. For the organisation, a public listing can damage trust and invite regulatory or contractual scrutiny, regardless of whether the full extent of the claim is later verified. Because the scale remains undisclosed, the precise number of people who should take protective steps cannot be quantified from public sources.

If your data was in this claimed breach

If you have had dealings with mydelux.com.my or believe your information may have been stored by the organisation, begin by changing passwords associated with any accounts linked to that relationship and enable multi-factor authentication where available. Monitor bank and credit statements for unusual activity and be alert to phishing attempts that reference the organisation or the breach. Consider placing fraud alerts with relevant credit-reporting services if you are concerned about identity misuse. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets; such a check provides one additional data point but does not confirm or rule out involvement in this specific incident. Public detail remains limited, so continued caution is warranted until more definitive information emerges.

AICompiled with AI assistance from public sources and published under our editorial standards.