Info Salons Listed by 8base Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Info Salons, an Australian firm that provides information-technology services for the exhibition and convention sector, was listed by the 8base ransomware group in a report dated 14 July 2023. Public detail remains limited: the number of people affected is unknown, and the only description of what was taken is that internal files were allegedly exfiltrated in a ransomware attack. The listing itself is a claim by the group rather than an independently confirmed disclosure.

For anyone who has registered for events managed by Info Salons or worked with the company, the incident raises ordinary but serious questions about whether personal or business information left the organisation’s systems. What follows sets out only what is known, places the claim in context, and outlines practical steps.

What happened

On 14 July 2023 it was reported that Info Salons appeared on the leak site associated with the 8base ransomware group. According to the available summary, the group asserted that internal files had been exfiltrated during a ransomware attack. No public figure has been given for the volume of data, the number of affected individuals, or the precise date the intrusion occurred. The method of initial access, the duration of any presence inside the network, and whether a ransom demand was issued or paid have not been disclosed in the material provided. As with many such listings, the appearance of a victim’s name on a ransomware site constitutes a claim by the operators; independent verification of the full scope has not been supplied in the facts at hand.

The group behind it: 8base

8base is a ransomware operation that became more visible in 2022–2023. Like other groups practising double extortion, it typically encrypts systems and simultaneously copies data, then threatens to publish the stolen material if payment is not made. The group maintains a public leak site on which it names organisations and, in some cases, releases sample files or larger archives. 8base has been observed targeting a range of mid-sized businesses across multiple countries and sectors; its operators have at times used affiliate models common to ransomware-as-a-service. Public reporting has not established any unique technical signature that would distinguish this particular claim against Info Salons from the group’s broader pattern. Statements appearing on the leak site about any single victim should be treated as assertions by the attackers until corroborated by the organisation or by independent forensic work.

Who is Info Salons?

Info Salons was established in Australia in 1990, around the time the Sydney Convention and Exhibition Centre opened and the local events industry expanded. The name derives from the French use of “salons” for exhibitions; the company applies information technology to exhibition and registration management. Its chief executive, Jo-Anne Kelleway, previously worked in a French exhibition-registration firm. Organisations of this type commonly handle attendee registration data, exhibitor details, badge and access systems, and related operational records for trade shows and conferences. Because such firms sit between event organisers and large numbers of participants, a breach can affect both corporate clients and individual registrants whose contact or identification details were collected for event purposes.

What was likely exposed

The only data type named in the available facts is “internal files exfiltrated in ransomware attack.” No inventory of those files, no confirmation of customer or employee records, and no statement of whether financial, identity or health-related information was included have been publicly detailed. Companies that manage exhibition registration typically hold names, email addresses, company affiliations, sometimes passport or ID numbers for international attendees, payment or invoicing data, and internal operational documents. It is reasonable to note that such categories are commonly present in this sector, yet it remains unconfirmed whether any of them were among the files 8base claims to have taken. Exact contents are therefore undisclosed.

The real-world impact

For individuals, the principal risks are the ordinary consequences of internal business files leaving an organisation: possible phishing or social-engineering attempts that reference real event or registration details, and the longer-term possibility that contact or identity data could be reused in other fraud. Because the scale is unknown, it is not possible to say how many people face elevated exposure. For Info Salons itself, a ransomware incident can disrupt operations, damage client confidence, and trigger contractual or regulatory notification duties under Australian privacy rules. Clients that relied on the firm for event registration may need to assess whether their own attendee data was involved and whether they must notify participants. None of these outcomes has been quantified in the public record surrounding the 14 July 2023 listing.

If your data was in this claimed breach

If you have registered for events handled by Info Salons or have done business with the company, treat the possibility of exposure as real but unconfirmed. Monitor account statements and email for unexpected messages that reference past exhibitions or use accurate personal details. Change passwords on any accounts that shared credentials or recovery addresses with registration systems, and enable multi-factor authentication where available. Consider placing fraud alerts with relevant credit-reporting bodies if you believe identity documents may have been involved. You can also run a free exposure scan of your email address to check whether it has already appeared in known breach data sets. Keep records of any suspicious contact and report clear fraud to local authorities. Further official statements from Info Salons, if issued, should be read carefully for concrete guidance on what was taken and who is affected.

AICompiled with AI assistance from public sources and published under our editorial standards.