kingpower.com Listed by Abyss Ransomware Group

On January 8, 2025, the Thai duty-free retailer King Power appeared on the leak site of the abyss Ransomware Group, with the attackers claiming to have exfiltrated internal files from the company’s systems.

What Public Reporting Shows

King Power, headquartered in Bangkok, operates online shopping platforms along with physical outlets at airports and major tourist locations across Thailand. Public reporting indicates the company was hit by a ransomware incident in which attackers gained access, copied internal documents, and later listed the victim on their public leak page. The exact number of records involved remains undisclosed, and the specific types of files taken have not been detailed beyond the broad description of internal files. No customer names, payment card details, or passport information have been publicly shown on the leak site so far.

The listing carries a deadline typical of ransomware operations, after which the group threatens to publish or sell the stolen data. Available reporting describes the incident as confirmed by the group’s own leak portal, hosted on an onion site and mirrored by ransomware tracking services such as ransomware.live.

Why This Matters for You and Your Family

When a retailer like King Power suffers a breach, the information stolen often includes supplier contracts, employee records, customer bookings, or travel details that can be repurposed for identity theft or phishing. If you or your family have ever shopped at King Power, used their online store, or traveled through Bangkok airports, your email, phone number, or travel records may now sit in an attacker’s archive. These details rarely stay isolated; they become building blocks for more targeted attacks against your household.