In October 2023, Pelindo, an Indonesian state-owned port operator, suffered a data breach executed by the BianLian ransomware group. The attack led to the exfiltration of 200GB of sensitive data, including SQL and ORACLE databases, source code APIs, internal technical documentation, and ICT development information. BianLian, known for shifting from file encryption to pure data extortion, exploited legal and regulatory pressures to coerce payment, threatening to leak the stolen data if demands were unmet. The breach exposed critical operational and proprietary assets, posing risks to Pelindo’s IT infrastructure, intellectual property, and potential regulatory non-compliance. While Avast had released a decryptor earlier in 2023, BianLian remained active, targeting high-profile entities—primarily in the U.S.—and listing victims on its extortion portal. The incident was reported by RedPacket Security, which clarified no affiliation with the attackers.