VULNpocalypse
LowBreach / campaignMonitoring

RansomHouse ransomware group claims Pertamina on its leak site

RansomHouse lists Pertamina as a victim on its leak site, per RansomLook; the claim is unverified, so monitor for official statements.

Published
Exploitation
No, only a leak-site claim reported by a tracker, not confirmed by the victim

What happened

On 2026-11-02, the claim tracker RansomLook reported that the RansomHouse ransomware group claimed Pertamina on its leak site. RansomLook marked the listing as “disclosed” (RansomLook).

A listing on a leak site is a claim by the group. It is not proof. The following are not confirmed:

  • Pertamina has not confirmed an incident in the available sources.
  • No independent outlet has verified the claim.
  • The entry point, the type of data and the volume of data are not confirmed.

Only the headline from RansomLook could be fetched. The full listing details could not be reviewed for this advisory.

Am I affected?

Not confirmed. The available source does not name affected systems, data types, customers or partners.

What to do now

  1. Treat the listing as an unverified claim until Pertamina or an official body makes a statement.
  2. If you are a Pertamina partner or supplier, watch for official communication from the company.
  3. Check back for updates. This advisory will be revised if confirmed details are published.

Sources

  • [RansomLook: [DISCLOSED]Pertamina: claimed by the ransomhouse ransomware group on its leak site](https://www.ransomlook.io/r/2fc197726bf8fb745fb829caa88fff297b1ff35b)