Micon National Listed by sarcoma Ransomware Group

On November 03, 2024, Australian office-products dealer Micon National appeared on the leak site operated by the sarcoma ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company, a family-owned business that supplies office furniture and fit-outs across more than 180 distribution points nationwide, has not yet published a public breach notification, so the exact number of people whose information is now exposed remains unknown.

Reported Details from the Listing

The sarcoma leak-site entry explicitly names Micon National and states that attackers obtained internal files. No sample data has been published at the time of writing, and the listing does not detail what categories of information were taken or how many records are involved. The disclosure indicates the data was stolen in the course of a ransomware deployment, after which Micon apparently did not pay the demanded ransom. Public reporting on sarcoma’s operations shows that groups of this type typically set short deadlines before publishing or selling stolen material; the precise deadline for this incident is not stated on the page.

Why This Matters for You and Your Family

When a supplier like Micon National suffers a breach, anyone who has ever bought furniture, placed a corporate order, or supplied personal details for delivery or credit checks could be affected. Internal files often contain customer names, addresses, phone numbers, email accounts, payment records, and sometimes driver’s licence or tax-file numbers. Even if your own data set is small, once it leaves the company’s control it can be combined with other leaks to build a complete profile. For families this means increased risk of identity theft, unexpected loan applications in your name, or targeted scams that reference recent office or home purchases you made through the business.

The Doxxing and Identity-Chain Risk

Stolen internal files frequently include not only customer spreadsheets but also employee rosters, supplier contracts, and email correspondence. Attackers and subsequent buyers can chain these details with usernames, children’s school activity logs, or gaming account handles that reuse the same passwords or recovery emails. A single address or phone number listed in an order can link a parent’s work identity to a child’s online profile within minutes. This is exactly the kind of cascade that turns a corporate breach into long-term personal exposure. DoxxScan by GalaxyWarden continuously monitors 13.1 billion+ breach records across more than 100 platforms and uses AI-powered identity-chain mapping to reveal these hidden connections before criminals exploit them.

Sarcoma Group’s Known Track Record

Public reporting attributes the sarcoma ransomware group with activity that emerged in early 2024. The gang has listed dozens of mid-sized organisations, many in retail, logistics, and professional services. Their typical playbook begins with initial access gained through phishing or compromised remote desktop credentials, followed by rapid exfiltration of internal shares and deployment of ransomware. When victims refuse payment, sarcoma publishes a sample or the full archive on their leak site and sometimes offers the data for sale on underground forums. The group’s extortion style relies on public embarrassment and the implicit threat that buyers could use the information for identity fraud or further attacks.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by Warden specialists.
• Enable continuous DoxxScan monitoring so the next breach that touches your family is caught and acted on within hours rather than months.
• Rotate any password you have used with Micon National or its related accounts, then enable two-factor authentication through an authenticator app instead of SMS.
• Cover the entire household because DoxxScan family coverage extends to dependents and children’s gaming accounts that often chain back to the same home address or recovery email.
• Let remediation specialists manage takedown requests across data brokers and leak sites so you do not have to chase every copy of your information manually.

The sarcoma listing of Micon National is a reminder that even routine business transactions can place your family’s details in the hands of organised criminals. Acting quickly on the exposed credentials and mapping your full identity chain gives you the best chance of staying ahead of the next stage of the attack. Start your DoxxScan trial today and put continuous monitoring plus hands-on remediation to work for your household.