Pr0x_fl0w

Hello DNA.

No deal. No payment. No response.

Today I am releasing the complete extraction from PT Brantas Abipraya (Persero) – a state-owned Indonesian construction giant responsible for critical water, energy, and transportation infrastructure. 236GB of raw internal data including dam blueprints, corruption investigation files, employee KTP scans, government tender documents, and financial audits.

What we exploited:
- Exposed corporate NAS with default credentials accessible from the internet
- Unpatched file-sharing protocol allowing lateral movement across internal servers
- No MFA on admin panels – weak password reused across multiple systems
- Zero anomaly detection on bulk data exfiltration (over 2 days of uninterrupted download)

Database Info:

Quote:- Organization: PT Brantas Abipraya (Persero)
- Domain: brantas-abipraya.co.id
- Country: Indonesia
- Total Size: 236GB compressed .rar
- Extraction Date: March – April 2026

Click to expand...

Compromised Data (236GB):

Quote:- Engineering blueprints: Dams (Bendungan Cabean, Blora, etc.), irrigation systems, toll roads, tunnels, airports, bridges, power plants
- Government tender documents: Budget allocations (RAB – Rencana Anggaran Biaya), contract valuations, winning bid breakdowns
- KPK corruption investigation files: Internal audits, whistleblower complaints, case #05/KPK/2025 (Lamongan construction fraud)
- Employee PII: KTP scans (Indonesian ID), NPWP tax numbers, payroll logs, home addresses, emergency contacts
- Corporate email archives (.pst) of directors and division heads
- Internal WhatsApp/Telegram chat logs between project managers and finance team
- Full telephone directory: Names, extensions, direct mobiles, email mappings for all employees
- Financial audits: Profit/loss statements, risk assessments, merger strategy documents (consolidation with Wika, Waskita, PP, Adhi, Nindya Karya)
- Hardcoded credentials in config files: Database passwords, VPN keys, admin panel logins
- Building permits and environmental compliance forms for active state projects

Click to expand...

Sample Data (representative – redacted):

Quote:Quote:
- Dam Blueprint: `Bendungan_Cabean_Blora_Structural_Final.pdf` – 47 MB – Topographical survey, concrete specs, stress simulations – Government budget: Rp 127M
- KPK File: `KPK_Investigasi_Korupsi_Lamongan.docx` – Case #05/KPK/2025 – Whistleblower logs – Named directors involved
- Employee KTP Scan: `scan_ktp_[ID]_verified.jpg` – Name: [REDACTED] – NPWP: 12.345.678.9-012.000 – Address: Jakarta Timur
- WhatsApp Log (2025): Finance Director to Project Manager – "Anggaran irigasi Lampung sudah cair. Segera transfer ke rekanan." (Lampung irrigation budget released. Transfer to partners immediately.)
- Config File: `/var/log/nginx/config/backup/config.php` – `$db_pass = 'BrantasProjectAdmin2024!'` – Plaintext admin password
- Telephone Directory: `Brantas_Phonebook_2026.xlsx` – 2,300+ entries – Direct mobiles and extensions for all 3 operational divisions

Click to expand...

Deliverables:
- `Brantas_Abipraya_236GB.rar` – Full archive
- Folder structure:
- `/engineering/dams_irigasi/` – CAD, PDF blueprints
- `/engineering/toll_roads_bridges/` – construction specs
- `/finance/kpk_investigations/` – corruption case files
- `/finance/audits_mergers/` – financial statements, consolidation docs
- `/hr/ktp_npwp/` – scanned Indonesian IDs
- `/hr/phone_directory/` – full employee contact list
- `/emails/pst_archives/` – director mailboxes
- `/configs/credentials/` – hardcoded passwords and VPN keys
- `/chat_logs/whatsapp/` – operational message exports

Download:

To see this hidden content, you must React with one of the following reactions : Like, Love, Haha, Wow