TripleX, CoinbaseCartel, Bashe Post Fresh Victims on Leak Sites — State Bank, Aerospace Avionics, Pharma Manufacturer Hit in 24-Hour Window

Leak site monitoring (May 22) shows a concentrated burst of new victim postings: TripleX listed Bank Negara Indonesia (state-owned, $90B+ in assets); CoinbaseCartel claimed Panasonic Avionics Corporation, the aerospace and in-flight entertainment supplier to major carriers; and Bashe posted Alkaloid AD Skopje, a Macedonian pharmaceutical and chemical manufacturer. None of the three organizations have publicly confirmed the incidents. The Panasonic Avionics listing is particularly significant given that avionics supply chains intersect with civil aviation safety systems and sensitive passenger data at scale.

This intelligence brief has been compiled from open-source reporting and corroborated across multiple threat intelligence sources. Defenders should treat the high severity rating as a guide to prioritization within their environment.

For the latest indicators of compromise, formatted SIEM queries, and unredacted actor intelligence related to this brief, DMZ Operator subscribers receive automated IOC packages via email the moment new advisories are published.