Chema Per Listed by Sarcoma Ransomware Group

On November 30, 2024, Peruvian industrial supplier Chema Per appeared on the leak site operated by the sarcoma ransomware group. The listing states that attackers exfiltrated 60 GB of internal files during a ransomware incident. The company, which provides additives and specialized products for Peru’s mining, construction, and industrial sectors, has not yet published a public breach notification detailing the exact data involved or the number of people affected.

Details from the Leak Listing

The sarcoma leak site entry states that Chema Per was hit by a ransomware attack and that internal files were successfully exfiltrated. It lists the compromised archive as 60 GB in size and notes that the data consists of files, without specifying the precise contents. The disclosure does not quantify how many employee, customer, or partner records may have been exposed, nor does it indicate whether personally identifiable information, financial documents, or operational blueprints were included. As of the publication date, Chema Per had not issued a formal statement confirming the incident or clarifying the scope.

Why This Matters for You and Your Family

When a company like Chema Per suffers a ransomware breach, the information stolen often includes documents that reference real people — suppliers, contractors, employees, and sometimes their family contacts. Even if you have never directly done business with the firm, your data can appear in vendor lists, employment records, or correspondence. Once files leave the victim’s network, they can be downloaded by anyone who accesses the leak site. This creates immediate risk of identity theft, fraud, and unwanted exposure for ordinary families whose information travels through industrial supply chains.

Internal files exfiltrated in such attacks frequently contain spreadsheets, contracts, invoices, and email archives that link names, addresses, national identification numbers, and financial details. The sarcoma group’s decision to publish the data means that risk window is now open.

Doxxing and Identity-Chain Risks

Leaked internal files rarely stop at one company. They often contain email addresses, phone numbers, and usernames that attackers or opportunistic criminals can chain together with data from other breaches. A single exposed work email can lead to linked personal accounts, social-media profiles, and even children’s gaming usernames that share the same password or recovery phone number. These identity chains allow doxxing campaigns that reveal home addresses, family relationships, and daily routines. Credential leaks of this nature frequently cascade into account takeovers on gaming platforms, where children’s profiles become entry points for further harassment or extortion.

Sarcoma Group’s Known Track Record

Public reporting attributes the sarcoma ransomware group with emerging in mid-2024 as a relatively new double-extortion operator. The group typically gains initial access through phishing or exploited remote desktop protocols, exfiltrates data before deploying ransomware, and then pressures victims by publishing samples on its leak site when ransom demands go unpaid. Notable prior victims listed on ransomware trackers include other mid-sized industrial and manufacturing firms. sarcoma follows a standard playbook: encrypt systems, threaten to release stolen files, and maintain pressure through both financial demands and public exposure. Exact ransom amounts demanded from Chema Per remain unknown, as the leak-site listing does not disclose negotiation details.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password used at Chema Per or related vendor portals anywhere it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to credential chaining.
• Let remediation specialists manage takedown requests for any exposed personal documents or broker listings that surface from this incident.

The Chema Per breach illustrates how quickly industrial ransomware leaks can expose ordinary families to long-term identity risks. Acting promptly on monitoring and credential hygiene limits the damage. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts often targeted after credential leaks. Start your DoxxScan trial today to close the gaps this incident created.