Boga Group

Boga Group is headquartered in Indonesia and operates as a restaurant operator. The company manages over 200 outlets across Indonesia and Malaysia. Its core business involves running and franchising various restaurant brands that serve food and beverage customers. Boga Group’s market focus is the Southeast Asian region, where it has established a noticeable presence. The organisation’s headquarters in Indonesia coordinates its regional strategy and outlet management. Being described as a major restaurant operator highlights its significance in the local food service industry. The scale of its outlet network contributes to its role as a key player in the regional dining market. No further details about its specific brands or ownership are provided in the available sources.

In September 2022, the cybercriminal group DESORDEN breached Boga Group’s servers. The attackers exfiltrated over 31 gigabytes of sensitive data from the compromised systems. The stolen information included approximately 409,000 customer records containing names, phone numbers, and email addresses. Additionally, about 16,000 employee records were taken, alongside financial documents and corporate files. As proof of intrusion, DESORDEN deleted databases from the servers but noted that the victim likely maintained backups. The group stated that financial gain was their primary motive, estimating the data could yield up to $20,000 when sold to buyers seeking personal information from Southeast Asian countries. DESORDEN also criticised the region’s weak cybersecurity regulations and inadequate breach notification practices. The incident underscored the volume of data Boga Group handles and highlighted challenges in protecting large‑scale customer and employee information. No explicit information about the company’s ownership structure or parent‑subsidiary relationships is available in the sources.