On October 22, 2025, Australian company OzSoft Solutions appeared on the leak site of the lynx ransomware group. The firm, which provides custom software and IT services from Launceston, Tasmania, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people whose information may have been exposed remains unknown, anyone whose personal or financial details were stored in OzSoft’s systems could now be at risk.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch ozsoft.com.au
Get alerted the next time ozsoft.com.au files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about ozsoft.com.au’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that lynx listed OzSoft on its dark-web leak portal after the company apparently did not meet the group’s demands. The data consists of internal files exfiltrated rather than a simple database dump. OzSoft Solutions Pty Ltd employs between 20 and 49 people and generates annual revenue between 1M and 5M Australian dollars. No customer list or precise volume of records has been publicly detailed, but the nature of an IT services provider means client contracts, invoices, employee records, and project documentation were likely among the stolen material.
Why This Matters for You and Your Family
When a company that builds or manages software for other organisations is breached, the ripple effects reach ordinary customers. If you or your family have ever used services powered by OzSoft, paid them directly, or had your information stored in systems they developed, your data may now sit on a criminal forum. Names, addresses, phone numbers, email accounts, and financial details are the usual ingredients attackers need to open accounts in your name, file fraudulent tax returns, or sell your information to other criminals. For families this can mean sudden loan applications in a teenager’s name or unexpected bills arriving at your doorstep months later.
The Doxxing and Identity-Chain Implications
Ransomware leaks rarely stop at one company. Stolen internal files often contain spreadsheets that link customer emails to phone numbers, home addresses, and sometimes dates of birth. These fragments become the starting point for doxxing chains. Once criminals connect an email from the OzSoft leak to a reused password on a gaming platform or social account, they can hijack those services and extract even more personal information. Credential leaks like this one cascade into account takeovers, turning a single breach into a trail that can expose your entire digital life and that of your children.