abcor.com.au Listed by threeam Ransomware Group

On February 22, 2024, Australian company ABCOR Pty Ltd appeared on the leak site operated by the threeam ransomware group. The listing states that internal files were exfiltrated during a ransomware attack against Preston General Engineering, a division of ABCOR that fabricates metal, aluminium and stainless steel parts. The number of people whose data was taken remains unknown, and the leak-site listing does not detail the specific documents posted.

Reported Details from the Listing

The primary disclosure on the threeam leak site states that ABCOR was compromised through a ransomware operation. It explicitly states that internal files were exfiltrated. No victim count is provided, nor does the posting specify which categories of records were taken or whether customer, supplier or employee information is included. The disclosure indicates the data is now available for anyone who visits the onion link, a common tactic used to pressure victims into payment.

Why This Matters for You and Your Family

When a manufacturing supplier like ABCOR suffers a breach, anyone who has done business with them, supplied personal details, or appeared in their records may be exposed. That includes employees, contractors, customers and even family members whose information was stored in shared spreadsheets or invoices. Internal files exfiltrated in February 2024 can contain names, addresses, phone numbers, dates of birth and financial details that stay valuable to identity thieves for years. Ordinary families rarely realise their information sits inside vendor databases until it surfaces on a leak site.

The Doxxing and Identity-Chain Risk

Leaked internal files often create long chains of personal data. An email address found in one document can be cross-referenced with usernames on gaming platforms, social media or shopping accounts. Attackers then use those links to build a complete profile, leading to targeted phishing, account takeovers or full identity theft. Credential leaks of this nature frequently cascade into gaming account compromises, especially for children and teenagers who reuse passwords across entertainment services and school-related logins. The exposure therefore extends beyond the original breach into persistent doxxing risks that can affect every member of a household.

Threeam Ransomware Group Track Record

Public reporting attributes the threeam group with emerging in late 2022 and focusing on double-extortion tactics. They encrypt victim systems, exfiltrate data before encryption completes, then threaten both data publication and operational disruption. Notable prior victims have included mid-sized manufacturing, logistics and professional-services firms across Australia, Europe and North America. Their typical playbook involves initial access through phishing or compromised remote desktop credentials, followed by quiet exfiltration over days or weeks before encryption begins. The group maintains an active leak site to publicly shame non-paying victims, exactly as seen in the ABCOR listing.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used at ABCOR or Preston General Engineering and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your data appears it is caught within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children's gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf while you focus on securing day-to-day accounts.

The ABCOR breach is a reminder that vendor compromises quietly pull ordinary families into the ransomware economy. Acting quickly on exposed credentials and hidden data linkages limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that explicitly includes children's gaming accounts. Start your DoxxScan trial today to understand exactly where you stand and begin closing the gaps.