In 2023, Indonesia’s Harita Group, a major manufacturing and resource conglomerate, fell victim to a ransomware attack by the MalaLocker group. The assault targeted the company’s Zimbra email servers, leading to the leak of 99,000 emails (510 GB), exposing highly sensitive data related to its nickel and bauxite mining operations, coal activities, and strategic partnerships, including those with Glencore International. The breach not only caused operational disruptions—impacting supply chains and financial stability—but also raised environmental and corporate governance concerns due to the exposure of internal communications. The incident underscored the vulnerability of manufacturing firms to ransomware, where downtime directly translates into financial losses, reputational damage, and potential regulatory scrutiny. The leaked data included proprietary business strategies, contractual agreements, and operational details, exacerbating risks of competitive disadvantage and legal liabilities.