The DYSPHOR1A ransomware group listed CitizensPay on its data leak site on 2026-09-05. Country: MM Sector: Financial Services Domains named: ctzpay.com Claim as published on the leak site: Citizens Pay (also known as CTZPay) is a mobile digital wallet and payment platform in Myanmar powered by Myanmar Citizens Bank (MCB) and Capital Connect Limited. Compromised agent user information — total data size 30 GB. Price range $7,000 to $25,000. Victim domain https://ctzpay.com.
OffSet7 / Dark Web / DYSPHOR1A
CitizensPay listed by DYSPHOR1A ransomware group
- Group
- DYSPHOR1A
- Sector
- Financial Services
- Country
- Myanmar (Burma)
- First seen
- 5 September 2026
This is a claim published by the threat group itself and has not been independently verified. OffSet7 does not host or link to any leaked data.
Monitor your company and suppliers
Get an alert the moment a ransomware group names your company or one of your suppliers.