Case Studies

Inside the Ransomware Containment at a Singapore Commodity Trading Firm

Encrypted workstation. Ransom note found. Threat neutralized in time.

How Blackpanda contained a Phobos ransomware attack at a Singapore firm — and how IR-1 would have saved 9x in costs.

Inside the Credential Compromise and Lateral Movement Incident at a Hong Kong EV Solutions Provider

External forwarding rules. Unauthorized inbox access. Credential compromise.

In Feb 2025, a Hong Kong EV charging provider faced credential compromise through exposed RDP. Blackpanda contained the threat before ransomware could strike.

Ransomware Response for a Singapore Property Firm: How Blackpanda Contained and Investigated a Rapidly Escalating Attack

A Singapore industrial space operator faced a severe ransomware attack impacting operations and internal systems. Learn how Blackpanda's IR-1 service deployed rapid containment, investigation, and forensics to support recovery and compliance.

Inside the Bixi Ransomware Attack at a Hong Kong Civil Engineering Equipment Company

A brute-force attack. Remote access from abroad. Thousands of encrypted files.

Inside the Data Leak Investigation at a Philippine Entertainment Resort

A tip. A dark web leak. High-stakes customer data at risk.

Small clinic affected by business email compromise

In March 2023, a small clinic in Southeast Asia fell victim to a Business Email Compromise (BEC) attack, which had severe repercussions on the clinic’s operations and finances.

Data breach at retail company

In November 2022, a well-established local retail company based in Southeast Asia, experienced a significant data breach that resulted in the compromise of customer information.

Boutique hotel suffers ransomware attack

In January 2023, a boutique hotel in Southeast Asia suffered a ransomware attack, resulting in the loss of sensitive information of international guests.

Ransomware attack on a private school

A private school, which caters to students ranging from kindergarten to high school, suffered a ransomware attack in early January 2023. The school is known for its high-quality education and attracts international and local students. The attack–attributed to the Maze ransomware group–was sophisticated, and the cybercriminals responsible demanded a ransom payment of around USD 51 thousand to restore access to the school’s systems.

Broker hit by ransomware faces over USD 5 million in losses

A medium-sized securities broker based in East Asia with a large client base was hit with a ransomware attack in February 2023. The attackers were able to gain access to the broker’s internal network and encrypt important files and data, rendering them unusable.