Propane Levac Inc. Listed by sarcoma Ransomware Group

On January 23, 2026, Canadian propane distributor Propane Levac Inc. appeared on the leak site of the sarcoma Ransomware Group. The company, which supplies residential, commercial, and agricultural customers across Ontario and Quebec, had 45GB of internal files exfiltrated during a ransomware attack.

What Public Reporting Shows

Public reporting indicates the incident involved the theft of internal company documents rather than customer databases. The leaked archive totals 45GB and was posted to the sarcoma Ransomware Group’s leak site. No specific count of affected individuals has been confirmed, but any records containing personal information about customers, employees, or suppliers would now be in the hands of the attackers. The company has not yet issued a public statement detailing the exact contents of the files.

Why This Matters for You and Your Family

If you or your family have done business with Propane Levac — whether as a residential customer, a farm operator, or a small business — your personal details may be among the stolen files. Names, addresses, phone numbers, account numbers, and payment information are the kinds of records propane companies routinely keep. Once exposed, this data can be sold, traded, or used to launch further attacks against you. Even if your information was not the primary target, ransomware groups often publish broad samples to pressure victims, putting ordinary families at risk.

The Doxxing and Identity-Chain Implications

A single breach like this rarely stops at one company. Attackers can combine the leaked files with data from previous breaches to build a complete picture of your identity. An address listed in a propane delivery record can be linked to your email, phone number, children’s names, or even gaming usernames. These connections create what security analysts call an identity chain. Once mapped, the chain makes it easier for criminals to impersonate you, reset passwords on other accounts, or launch doxxing campaigns. Credential leaks of this nature frequently cascade into account takeovers, especially for gaming accounts belonging to you or your children.

Sarcoma Ransomware Group’s Track Record

Public reporting attributes the attack to the sarcoma Ransomware Group. The group emerged in late 2024 and has targeted organizations across North America and Europe. Notable prior victims include mid-sized manufacturers, logistics firms, and regional service providers. Their typical playbook begins with initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files and deployment of ransomware. If the victim refuses to pay, the group publishes stolen data on their leak site and sometimes offers samples to journalists or other criminals. They set payment deadlines measured in days or weeks and increase pressure by releasing additional data samples over time.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you have ever used with Propane Levac — or any similar service — and enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak exposing your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same home address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf while you focus on securing your accounts.

The incident shows how quickly a routine business relationship can expose your family to long-term risk. Taking concrete steps now limits the damage and reduces the chance that this 45GB leak becomes the starting point for future targeting. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage including children’s gaming accounts.