Job Net .COM.MM Data Breach

Job Net .COM.MM, a professional services organization based in Myanmar, has been listed as a victim on the DYSPHOR1A ransomware group’s dark web portal, published on August 20, 2026. The listing was identified through SOCRadar’s Dark Web Monitoring service. Job Net .COM.MM operates as an online job portal and employment services platform serving Myanmar’s labor market. Its listing alongside other Myanmar-based organizations reflects DYSPHOR1A’s concentrated operational focus on Southeast Asian targets. In the 60 days prior to this listing, DYSPHOR1A has claimed 6 other victims across its leak portal. The group has shown a strong targeting pattern in the Education, Professional Services, and Government & Defense sectors. Geographically, its victims are concentrated in Myanmar, Thailand, and Indonesia. Other recent DYSPHOR1A listings that align with Job Net .COM.MM’s regional profile include Strategy First International College, the Indonesian Police Database, GUSTO College GLMS, and AYUDHYA TH Insurance. Job Net .COM.MM fits the group’s pattern of targeting digital services organizations and public-facing platforms in emerging markets.

SOCRadar’s stealer-log telemetry did not surface any monitoring data for jobnet.com.mm in the current queried window. The domain’s limited presence in global infostealer feeds prevented automated credential correlation for this victim. The absence of a telemetry result does not establish the absence of credential exposure — job portal users frequently register with personal email addresses that would not surface under the corporate domain query. For ransomware groups such as DYSPHOR1A, infostealer-harvested credentials represent one of several potential initial access pathways. The absence of evidence in this query does not rule out credential-based initial access — credentials may have surfaced in feeds outside this dataset, been captured under alternate email domains, or been obtained through phishing or other vectors. CTI teams covering Southeast Asian digital services organizations should treat credential monitoring and employee security awareness as foundational controls.

This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.