> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# HW Group Indonesia Allegedly Suffers Data Breach Exposing Customer Database
- URL: https://darkwebinformer.com/hw-group-indonesia-allegedly-suffers-data-breach-exposing-customer-database/
- Published: 2025-12-24T23:37:34.000Z
- Updated: 2025-12-25T23:26:56.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

<!DOCTYPE html> 

Dark Web Informer - Cyber Threat Intelligence

BREACH ALERTS

# HW Group Indonesia Allegedly Suffers Data Breach Exposing Customer Database

📅 December 24, 2025 - 4:36:30 PM UTC 

🌍 Indonesia 

🏢 Hospitality & Tourism 

Affected Organization

HW Group Indonesia

Website

[holywings.com](https://holywings.com)

Threat Actor

Demetrius

### Incident Overview

The threat actor alleges that a database belonging to **holywings.com** (Indonesia) was leaked following a data breach in December 2025\. The post claims the exposure affects over **60,000 user records**, which are being offered for download on a dark web forum. 

Shared samples indicate the dataset may contain: 

- User identifiers
- Date of Birth
- Gender information
- National ID (KTP) numbers
- Place of Birth
- More

### Image Preview

[ ![Screenshot related to an alleged data breach claim](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/12/978325692873598723982.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/12/978325692873598723982.png) [ ![Screenshot related to an alleged data breach claim](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/12/978325692873598723983.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/12/978325692873598723983.png) 

🔒

### Unlock Full Breach Intelligence

Premium subscribers gain access to PLUS, PRO, or ELITE features, including breach claim URLs and fully unredacted threat and ransomware feeds with no blur, along with leak and breach coverage, 500+ onion and clearnet resources, uptime monitoring, high-resolution watermark-free images, and more. 

[Subscribe Now](https://darkwebinformer.com/#/portal/signup) [Subscribe with Crypto](https://darkwebinformer.com/crypto-payments/) 

🔬

### API Access for Researchers & Security Teams

SOC teams, researchers, and security professionals can integrate Dark Web Informer's threat intelligence directly into their workflows via API. Access real-time breach data, threat feeds, and monitoring capabilities programmatically. 

[Learn About API Access](https://darkwebinformer.com/api-details/) 

Dark Web Informer © 2025 | Cyber Threat Intelligence | [DarkWebInformer.com](https://darkwebinformer.com/)