Falcon Gaming Listed by arcusmedia Ransomware Group

On February 1, 2025, Australian video-game retailer Falcon Gaming appeared on the leak site of the ransomware group ArcusMedia. The company’s internal files were allegedly exfiltrated during a ransomware attack, exposing data that could affect customers, employees, and anyone whose information was stored in those systems.

What's Publicly Reported from Reporting

Public reporting indicates that Falcon Gaming, headquartered in Australia, had internal documents stolen and published on the ArcusMedia leak portal. The exact number of people affected remains unknown, and the precise contents of the files have not been independently verified by third parties. The listing carries the typical ransomware countdown format, showing days, hours, minutes and seconds remaining before further data publication or sale. No evidence has surfaced that payment was made or that the files were removed from the leak site.

Why This Matters for You and Your Family

When a retailer that sells games, consoles, and online accounts is breached, the information inside its systems often includes names, addresses, phone numbers, email accounts, and payment details. Any of these can be used to impersonate you, reset passwords on other services, or open accounts in your name. For families this risk extends beyond the adult who made the purchase: children’s names, dates of birth, and gaming usernames frequently sit in the same customer records. Once those details leave the company’s control, they can appear on multiple dark-web marketplaces within weeks.

The Doxxing and Identity-Chain Risk

A single breach rarely stays isolated. Criminals combine the fresh data with older leaks to build an identity chain that links your email address to your phone number, physical address, family members’ names, and gaming handles. That chain makes targeted doxxing and account takeovers far easier. Public reporting shows that credential leaks from gaming retailers have repeatedly led to hijacked Steam, Epic, Roblox, and Discord accounts. When children’s gaming profiles are linked back to a parent’s address or credit card, the entire household becomes a single point of failure.

ArcusMedia’s Publicly Known Track Record

Public reporting attributes the group’s first notable campaigns to mid-2024. Since then ArcusMedia has listed dozens of small-to-medium businesses across retail, healthcare, and technology sectors. Its typical playbook begins with initial access gained through phishing or exploited remote-desktop credentials, followed by exfiltration of internal file shares, then extortion demands backed by the threat of gradual data publication on its leak site. The group has previously targeted organisations whose customer databases contained personal information rather than purely corporate secrets.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, gaming handles, and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate the password you used at Falcon Gaming anywhere else it is reused, then enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak that touches your family is flagged within hours instead of months.
• Cover the household with DoxxScan family protection, which includes dependents and children’s gaming accounts that often chain back to the same address or payment details.
• Let remediation specialists handle takedown requests for any exposed personal records that surface on data-broker or doxxing sites.

The Falcon Gaming breach is a reminder that even retailers you trust with small purchases can expose far more than you expect. Acting quickly on the exposed data and maintaining ongoing visibility is the most practical way to limit damage. DoxxScan by GalaxyWarden provides that continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping that connects handles to real identities, and hands-on remediation by specialists who manage takedowns for the whole household, including children’s gaming accounts that are frequently targeted after credential leaks like this one.