Incident Overview

The threat actor "Nerius" claims to have leaked a database belonging to Kreen Indonesia and made it available for download.

According to the threat actor's post, Kreenconnect.com is described as "an online ticketing and voting platform operated by PT Tiket Kreen Nusantara, specializing in event ticket sales and voting systems for contests and events."

The threat actor notes that "Previously, in another post, this data was sold, even though it was free" and references a previous thread where the data was allegedly being sold. The compromised data reportedly includes:

• First name
• Last name
• Email
• Phone
• Provider

A data sample was provided showing multiple user records with email addresses, phone numbers, and associated telecommunications providers (primarily Telkomsel). The sample entries show a pattern of Indonesian user data with various email domains including Gmail.com and other providers.

The claim has not been independently verified.