Micon National Listed by Sarcoma Ransomware Group
If you are a customer of Micon National, here’s what is being claimed, and what it would mean for you.
Micon National was listed on Sarcoma's leak site. Sarcoma claims to have stolen internal data. This is the group's claim, not a confirmed finding.
On November 03, 2024, Australian office-products dealer Micon National appeared on the leak site operated by the sarcoma ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company, a family-owned business that supplies office furniture and fit-outs across more than 180 distribution points nationwide, has not yet published a public breach notification, so the exact number of people whose information is now exposed remains unknown.
Watch Micon National
Get alerted the next time Micon National files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Micon National’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Listing
The sarcoma leak-site entry explicitly names Micon National and states that attackers obtained internal files. No sample data has been published at the time of writing, and the listing does not detail what categories of information were taken or how many records are involved. The disclosure indicates the data was stolen in the course of a ransomware deployment, after which Micon apparently did not pay the demanded ransom. Public reporting on sarcoma’s operations shows that groups of this type typically set short deadlines before publishing or selling stolen material; the precise deadline for this incident is not stated on the page.
- Every indexed leak tied to your address — all of them, named and dated
- A deeper search of collected breach data — the kinds of your information it holds, where it finds you
- What this kind of incident typically exposes
- A ten-minute lock list written for this kind of organisation
Why This Matters for You and Your Family
When a supplier like Micon National suffers a breach, anyone who has ever bought furniture, placed a corporate order, or supplied personal details for delivery or credit checks could be affected. Internal files often contain customer names, addresses, phone numbers, email accounts, payment records, and sometimes driver’s licence or tax-file numbers. Even if your own data set is small, once it leaves the company’s control it can be combined with other leaks to build a complete profile. For families this means increased risk of identity theft, unexpected loan applications in your name, or targeted scams that reference recent office or home purchases you made through the business.
The Doxxing and Identity-Chain Risk
Stolen internal files frequently include not only customer spreadsheets but also employee rosters, supplier contracts, and email correspondence. Attackers and subsequent buyers can chain these details with usernames, children’s school activity logs, or gaming account handles that reuse the same passwords or recovery emails. A single address or phone number listed in an order can link a parent’s work identity to a child’s online profile within minutes. This is exactly the kind of cascade that turns a corporate breach into long-term personal exposure. DoxxScan by GalaxyWarden continuously monitors 13.1 billion+ breach records across more than 100 platforms and uses AI-powered identity-chain mapping to reveal these hidden connections before criminals exploit them.
Sarcoma Group’s Known Track Record
Public reporting attributes the sarcoma ransomware group with activity that emerged in early 2024. The gang has listed dozens of mid-sized organisations, many in retail, logistics, and professional services. Their typical playbook begins with initial access gained through phishing or compromised remote desktop credentials, followed by rapid exfiltration of internal shares and deployment of ransomware. When victims refuse payment, sarcoma publishes a sample or the full archive on their leak site and sometimes offers the data for sale on underground forums. The group’s extortion style relies on public embarrassment and the implicit threat that buyers could use the information for identity fraud or further attacks.
What to do
- Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by Warden specialists.
- Enable continuous DoxxScan monitoring so the next breach that touches your family is caught and acted on within hours rather than months.
- Rotate any password you have used with Micon National or its related accounts, then enable two-factor authentication through an authenticator app instead of SMS.
- Cover the entire household because DoxxScan family coverage extends to dependents and children’s gaming accounts that often chain back to the same home address or recovery email.
- Let remediation specialists manage takedown requests across data brokers and leak sites so you do not have to chase every copy of your information manually.
The sarcoma listing of Micon National is a reminder that even routine business transactions can place your family’s details in the hands of organised criminals. Start your DoxxScan trial today and put continuous monitoring plus hands-on remediation to work for your household.
What the free scan actually returns
Found on people-search siteswe remove these
These listings are live, public, and legal to remove — and removing them is what we do.
Found in breach recordsverifiedreported — unverified
Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.
Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.
Report details & sourcing
Related breaches
northeastrehab.com Listed by BrainCipher Ransomware Group
N/A I don't have reliable, verified information about a specific company operating at this domain. …
Vera Science Listed by Genesis Ransomware Group
A Biotechnology Company…
TLC Perinatal Listed by Genesis Ransomware Group
A provider of healthcare services.…