DBHunter
Infinity Member
Golden Member
- Joined
- August 23, 2025
- Messages
- 2,519
- Reaction score
- 6,443
- Points
- 113
- Thread Author
- #1
We gained access to the workforce url belonging to the company. This doesn't just affect Sinar Mas Agribusiness and Food Golden Agri-Resources) but other big companies in the companies exposed. The full leak is below and this is a leak so all researchers you can confirm it because we have the file tree and you can check the files which confirms it. The company knows and failed to contact us so there getting exposed and along with critical data. Post this asap and confirm it asap because the company needs to pay for what they deserve and could've paid a simple ransom and we would've kept it a secret. This is a alert to all companies if we contact you and you don't reach us back we will expose you and make sure all companies learn there lesson for not paying us.
size= 375.66MB
1. Government & Tax Identifiers (PII)
- National Identity Documents: Full digital copies of the target's Indonesian National ID Card (KTP) and Family Card (KK).
- Tax Accounts: Electronic tax card files (NPWP-Elektronik), salary declarations, and family dependent logs.
- Academic Verification: Original graduation and education certificates
2. Corporate Payroll & Financial Logs
These files expose corporate banking transaction behaviors and sensitive account data
- Expense Ledger Sheets: Complete .xlsx spreadsheet exports of personal corporate Expense Transactions and Cash Advances.
- System Actions: Administrative spreadsheets capturing back-end transactions (Business Process Transactions of Type Awaiting Action).
- Medical Benefits: Signed insurance registration packets for the Indonesian healthcare system (BPJS Kesehatan forms PS01 and PS09) and pension records (JMO)
3. Corporate Talent Tracking & Strategy
This category contains proprietary operational data and performance reviews of multiple corporate employees.
- Talent Evaluations: Three high-priority Executive Talent Cards exported in early 2026 for employees Fitri Rahmiyani, Anton, and Ilyasa Deva Wirabuana
- Performance Checklists: Complete Individual Contributor and Managerial Performance Planning and Objective (PPO) appraisals
- Strategic Playbooks: Proprietary corporate Balanced Scorecard (BSC) alignment metrics and multi-tier organizational mapping sheets.
4. Internal Corporate HR Guides & Training Playbooks
This encompasses the internal operational intellectual property of Sinar Mas / Golden Agri-Resources.
- Corporate Playbooks: Internal toolkits regarding employee Performance Improvement Plans (PIP Guidance System) and strict Exit Checklists across separate operational sectors (Refinery, Upstream, Corporate, Trading).
- Internal Training Libraries: Master human capital catalogues, including the extensive 2023 SMAF Learning Catalogue and video guides explaining target-setting reviews.
- System Security Guides: Internal standard operating procedures detailing how IT handles locked user network accounts.
5. Workday Infrastructure & Workspace Assets
These items reveal exactly how the company's internal ERP platform is structured.
- Workday Blueprints: Extensive multi-part Workday Knowledge archives (WD Knowledge.zip chunks 001–003) alongside platform layout change blueprints ("Workday - Tampilan baru New Look.pdf").
- Identity Assets: Official corporate letterheads, document templates, and strictly controlled digital certificate signing configurations (TidiNote 900 setup logs).
the data doesn't just affect one but downstream companies to name a few Unilever, Nestlé, Procter & Gamble, and Mondelēz International and including johnson and johnson too. it affects those companies too because of supply chain interdependencies you can see how by just looking it up if you want.
size= 375.66MB
1. Government & Tax Identifiers (PII)
- National Identity Documents: Full digital copies of the target's Indonesian National ID Card (KTP) and Family Card (KK).
- Tax Accounts: Electronic tax card files (NPWP-Elektronik), salary declarations, and family dependent logs.
- Academic Verification: Original graduation and education certificates
2. Corporate Payroll & Financial Logs
These files expose corporate banking transaction behaviors and sensitive account data
- Expense Ledger Sheets: Complete .xlsx spreadsheet exports of personal corporate Expense Transactions and Cash Advances.
- System Actions: Administrative spreadsheets capturing back-end transactions (Business Process Transactions of Type Awaiting Action).
- Medical Benefits: Signed insurance registration packets for the Indonesian healthcare system (BPJS Kesehatan forms PS01 and PS09) and pension records (JMO)
3. Corporate Talent Tracking & Strategy
This category contains proprietary operational data and performance reviews of multiple corporate employees.
- Talent Evaluations: Three high-priority Executive Talent Cards exported in early 2026 for employees Fitri Rahmiyani, Anton, and Ilyasa Deva Wirabuana
- Performance Checklists: Complete Individual Contributor and Managerial Performance Planning and Objective (PPO) appraisals
- Strategic Playbooks: Proprietary corporate Balanced Scorecard (BSC) alignment metrics and multi-tier organizational mapping sheets.
4. Internal Corporate HR Guides & Training Playbooks
This encompasses the internal operational intellectual property of Sinar Mas / Golden Agri-Resources.
- Corporate Playbooks: Internal toolkits regarding employee Performance Improvement Plans (PIP Guidance System) and strict Exit Checklists across separate operational sectors (Refinery, Upstream, Corporate, Trading).
- Internal Training Libraries: Master human capital catalogues, including the extensive 2023 SMAF Learning Catalogue and video guides explaining target-setting reviews.
- System Security Guides: Internal standard operating procedures detailing how IT handles locked user network accounts.
5. Workday Infrastructure & Workspace Assets
These items reveal exactly how the company's internal ERP platform is structured.
- Workday Blueprints: Extensive multi-part Workday Knowledge archives (WD Knowledge.zip chunks 001–003) alongside platform layout change blueprints ("Workday - Tampilan baru New Look.pdf").
- Identity Assets: Official corporate letterheads, document templates, and strictly controlled digital certificate signing configurations (TidiNote 900 setup logs).
the data doesn't just affect one but downstream companies to name a few Unilever, Nestlé, Procter & Gamble, and Mondelēz International and including johnson and johnson too. it affects those companies too because of supply chain interdependencies you can see how by just looking it up if you want.
