PLUS Malaysia Berhad Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
PLUS Malaysia Berhad was listed by the qilin ransomware group on March 01, 2026, after internal files were exfiltrated in a ransomware attack. Individuals connected to the organisation should review any notices from PLUS Malaysia Berhad and take steps to protect their information.
Inside the incident
PLUS Malaysia Berhad was listed on the qilin ransomware leak site on 1 March 2026. The group claims to have stolen internal data and states that files were exfiltrated during a ransomware attack. No confirmation of the claim has been issued by the organisation, and the number of people whose information may be involved remains undisclosed.
Who is qilin?
Qilin is a ransomware-as-a-service operation that maintains a public leak site to publish data taken from organisations that do not meet its demands. The group typically uses double-extortion tactics, encrypting systems and threatening to release stolen files. It has appeared in multiple public incident reports since 2022, though specific claims made about any single victim are treated as unverified until independently confirmed.
About PLUS Malaysia Berhad
PLUS Malaysia Berhad operates the major expressway network in Peninsular Malaysia and manages electronic toll collection, customer accounts, and related administrative systems. Organisations of this type routinely hold records that include vehicle registration details, payment information, and personal identifiers linked to account holders. A breach at such an operator can therefore touch large numbers of daily road users even when the precise data set remains unknown.
What was likely exposed
The only detail released is that internal files were claimed to have been taken. The exact categories of information contained in those files have not been disclosed.
What's at stake
Internal files from a transport operator can contain operational records, customer identifiers, or financial references. If personal data is present, affected individuals could face risks of account misuse or targeted fraud. The organisation itself may encounter regulatory scrutiny and costs associated with investigation and remediation, though the scale of either outcome is not yet known.
Were you affected?
Monitor official statements from PLUS Malaysia Berhad and any notices issued by Malaysian data-protection authorities. Individuals can also check whether their email address appears in publicly indexed breach data through a free exposure scan. Concrete first steps include:
- Reviewing bank and toll-account statements for unusual activity.
- Enabling multi-factor authentication on any linked services.
- Changing passwords for accounts that reuse credentials associated with the operator.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Kontena Nasional Berhad Listed by qilin Ransomware GroupBmtp Listed by thegentlemen Ransomware GroupSpecial Shapes Refractory Listed by qilin Ransomware GroupTrace Listed by thegentlemen Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the PLUS Malaysia Berhad Listed by qilin Ransomware Group →
Publicly posted by qilin — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.