RANSOMWARE VICTIMENERGYDUPLICATE CLAIM

Star Energy Geothermal Salak

www.starenergy.co.id
ransomhouse📍 ID (ID)📅 April 11, 2026
8
same group

Attack Intelligence

Star Energy Geothermal Salak was compromised in a ransomware attack attributed to ransomhouse in April 2026. The organization, operating in the Energy sector in ID, was added to the group's data leak site as part of an extortion campaign.

ransomhouse operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Star Energy is an Indonesian energy company focused on geothermal power generation and oil & gas exploration, operating a total of 926 MW of geothermal capacity in West Java. The company supplies clean renewable energy to Indonesia’s national grid while actively expanding its geothermal output toward a 1 GW target. Under its parent company, Barito Renewables, Star Energy has committed significant investment to reach 2.3 GW of renewable capacity by 2032, including wind power assets.

Additional Details

Other Victims — ransomhouse (8)

Quick Facts

CountryID (ID)
SectorEnergy
Attack DateApr 11, 2026
Domainwww.starenergy.co.id
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

ransomhouse
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.