Kadac Australia Listed by Medusa Ransomware Group

On February 12, 2024, Australian health-products supplier Kadac appeared on the leak site operated by the Medusa ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the company, which has supplied organic, natural and health products across the Asia-Pacific region since 1973. Anyone whose personal or payment information has ever passed through Kadac’s systems — customers, suppliers, employees or contractors — may now face heightened risk of identity theft and fraud.

Reported Details from the Listing

The Medusa leak-site entry explicitly claims that internal files were exfiltrated following a ransomware deployment at Kadac. The disclosure does not quantify the number of records affected, list specific data types such as customer names, addresses, payment details or supplier contracts, nor provide a ransom demand or payment deadline. It simply states that data was stolen and is held for potential release if the company does not negotiate. The corporate address listed — 151-155 Woodlands Drive, Braeside, Victoria 3195 — matches Kadac’s publicly known headquarters, lending credibility to the claim.

Because the listing offers no sample files or detailed inventory, the precise scope of exposed information remains unknown to the public. This opacity is common in early-stage ransomware listings where threat actors withhold full proof until negotiations collapse.

Why This Matters for You and Your Family

If you or anyone in your household has purchased vitamins, organic groceries, health supplements or related products from retailers supplied by Kadac, your details may sit inside the stolen files. Even basic contact information — name, delivery address, phone number and email — can be combined with data from other breaches to build a complete profile. Health-product purchase records are especially sensitive because they can reveal medical conditions, dietary requirements or family circumstances that criminals exploit for phishing or blackmail.

Employees and contractors who provided tax-file numbers, superannuation details or direct-deposit information are also at risk. Once such data leaves a legitimate company’s control, it circulates rapidly on underground markets where buyers combine it with stolen credentials to commit identity fraud, open accounts in your name or target your family with convincing scams.

Doxxing and Identity-Chain Risks

Ransomware thefts like this rarely stay isolated. A single leaked email or phone number often links to gaming accounts, social-media handles and family-member profiles, creating an identity chain that stretches far beyond the original breach. Criminals use these connections to dox individuals, publish home addresses, harass family members or hijack children’s online accounts. Credential leaks of this nature frequently cascade into gaming-platform takeovers because the same password reused across work, shopping and play becomes an open door.

Continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, combined with AI-powered identity-chain mapping, is essential to spot these linkages before damage occurs. DoxxScan by GalaxyWarden specialises in exactly this work, tracing how one exposed Kadac-related record can expose an entire household including children’s gaming accounts.

Medusa’s Publicly Known Track Record

Public reporting attributes Medusa’s first significant campaigns to late 2021. The group has since targeted organisations across North America, Europe and the Asia-Pacific, focusing on mid-sized companies in manufacturing, distribution and professional services. Notable prior victims include logistics firms, food suppliers and healthcare-adjacent businesses whose customer and employee data held immediate resale value.

Medusa’s typical playbook begins with initial access gained through phishing, compromised remote-desktop credentials or exploited vulnerabilities in internet-facing applications. Once inside, operators exfiltrate documents before deploying ransomware that encrypts systems. The extortion phase combines encryption pressure with the threat of data publication on their leak site, often giving victims a short window — sometimes as little as ten days — to pay before samples or full archives are released. The Kadac listing follows this established pattern.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles and real-world identity so you can see exactly how the Kadac breach connects to the rest of your digital footprint.
• Rotate any password you ever used at Kadac or its retail partners and enable 2FA through an authenticator app rather than SMS on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches you or your family is caught and acted on within hours, not months.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts which often chain back to the same breached address or parent email.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise consume hundreds of hours of your own time.

The Kadac breach is a reminder that even established regional suppliers can become gateways to personal exposure. Acting quickly on the information now available limits how far criminals can travel down the identity chain that begins with this incident. Start your DoxxScan trial today and place continuous, specialist-backed protection between your family and the growing pile of stolen corporate data.