DYSPHOR1A Claims CitizensPay Data in Myanmar Ransomware Listing
Summary
A ransomware.live listing attributes to DYSPHOR1A an unverified claim that 30 GB of CitizensPay agent information was compromised, with a reported ransom demand of $7,000–$25,000.
Key points
- The listing names CitizensPay (CTZPay), a mobile wallet and payment platform in Myanmar, as the alleged victim.
- Ransomware.live attributes the claim to the ransomware group DYSPHOR1A.
- The group reportedly claims compromised agent user information totals 30 GB.
- The reported ransom demand is between $7,000 and $25,000.
- The listing was recorded as discovered and published on September 5, 2026.
- The publisher says it cannot confirm the claim's accuracy.
Article Details
- Victim
- CitizensPay (also known as CTZPay)
- Victim Domain
- https://ctzpay.com
- Claim Date
- 2026-09-05
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by DYSPHOR1A; unconfirmed
- Exfiltrated Data
- Compromised agent user information, according to the ransomware group's claim; authenticity and exfiltration are unconfirmed.
- Exfiltrated Size
- 30 GB, as claimed by DYSPHOR1A; unconfirmed
- Ransom Demand
- $7,000–$25,000, reported in the claim; no payment is reported.
- Leak Status
- A ransomware claim is reported, but no leak or publication of data is established.