INTI International University Ransomware Claim by Rhysida (Oct 2026)

Claim Summary

The Rhysida ransomware group has allegedly listed INTI International University & Colleges, a Malaysian education provider, on its dark web leak site. According to the threat actor, the claimed attack date is October 30, 2026. The group purports to have exfiltrated data from the institution and is threatening to publish it unless a ransom is paid.

INTI International University & Colleges is a private higher education group in Malaysia offering undergraduate, postgraduate, and professional development programs across business, engineering, health sciences, and design. The threat actor has not disclosed a specific data volume, listing the amount as “Undisclosed.”

This claim has NOT been independently verified. No confirmation has been issued by INTI International University & Colleges, and no sample data, file listings, or proof-of-compromise artifacts have been validated by Yazoul Security.

Threat Actor Profile

rhysida is a ransomware operation that first emerged publicly in mid-2023 and has since been associated with attacks across healthcare, education, manufacturing, and government sectors. The group is widely reported to operate a ransomware-as-a-service (RaaS) model and is known for double extortion tactics, threatening to auction or leak stolen data if payment demands are not met.

Public reporting has linked Rhysida to the use of living-off-the-land techniques, exploitation of exposed remote access services, and abuse of legitimate credential access tooling. Specific tooling and infrastructure details for this alleged incident are not available, and the group’s total victim count remains unconfirmed in open sources. No dedicated public research references were provided alongside this claim.

Yazoul Security maintains ongoing tracking of Rhysida activity. Organizations seeking detection guidance can review our advisory resources at /advisory/ and actor intelligence at /intel/. Where available, YARA and behavioral detection rules for Rhysida-associated tooling should be deployed to monitor for lateral movement and data staging activity.

Alleged Data Exposure

The threat actor claims to have stolen data from INTI International University & Colleges but has not published a data volume, file manifest, or sample set. The leak site entry describes the victim’s academic offerings rather than detailing the nature of the exfiltrated material.

Because no samples have been released or verified, the scope, sensitivity, and authenticity of any alleged data remain unknown. Education sector victims typically hold student records, staff information, research data, and financial records, but Yazoul Security has no evidence that any specific category of data was actually taken in this case.

Potential Impact

If the claim is accurate, potential impacts could include exposure of institutional and personal records, operational disruption, regulatory scrutiny under Malaysian data protection law, and reputational harm. However, ransomware groups routinely exaggerate claims and sometimes list victims based on minimal or unverified access. The absence of disclosed data volume or published samples is a caution flag that should temper assumptions about the scale of any breach.

What to Watch For

• Official statement or notification from INTI International University & Colleges
• Publication of data samples or auction listings by the threat actor
• Regulatory disclosures from Malaysian authorities
• Indicators of Rhysida-associated tooling in education sector telemetry
• Updates to our actor profile at /intel/actor/rhysida/

Disclaimer

This report is based solely on an unverified claim published on a ransomware group’s leak site. Nothing in this article should be treated as confirmed fact. Yazoul Security has not independently verified the attack, the data theft, or the threat actor’s assertions. Ransomware operators frequently misrepresent victim data to pressure targets. Readers should await official confirmation from INTI International University & Colleges before drawing conclusions.