Kadac Australia Listed by medusa Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 12 February 2024, the ransomware group known as medusa listed Kadac Australia on its leak site, claiming the company had been the target of a ransomware attack in which internal files were exfiltrated. The number of people affected remains unknown, and public detail about the incident is limited to the group’s claim and the basic organisational facts that have been reported.

Kadac Australia is a long-established supplier of organic, natural and health products serving the Asia-Pacific region. Any confirmed compromise of its systems would raise practical concerns for staff, partners and customers whose information may have been among the internal files the group says it took.

What happened

According to the reported listing, medusa claimed responsibility for a ransomware attack against Kadac Australia and stated that internal files had been exfiltrated. The listing was reported on 12 February 2024. No public confirmation of the attack’s success, the precise date of intrusion, the technical method used, or the volume of data involved has been disclosed in the available record. The number of individuals affected is listed as unknown. Beyond the group’s claim that internal files were taken, further operational details remain undisclosed.

Who is medusa?

Medusa is a well-documented ransomware group that operates a double-extortion model: it encrypts systems and simultaneously steals data, then threatens to publish the stolen material on a dedicated leak site if a ransom is not paid. The group has listed numerous organisations across multiple sectors in recent years, typically posting victim names, sample files or descriptions of the data it claims to hold. Its listings are claims made by the actors themselves and are not independent verification that a breach occurred or that every asserted detail is accurate. In this case, the only specific assertion tied to Kadac Australia is the leak-site listing itself and the statement that internal files were exfiltrated.

Who is Kadac Australia?

Kadac Australia was founded in 1973 and operates as a supplier of organic, natural and health products across the Asia-Pacific region. Its corporate office is located at 151-155 Woodlands Drive, Braeside, Victoria 3195, Australia. Organisations of this type typically manage supplier and customer records, product and inventory data, employee information, financial and logistics files, and internal correspondence. A ransomware incident affecting such a business can therefore touch commercial relationships, staff privacy and the integrity of supply-chain information even when the exact contents of any stolen material have not been independently confirmed.

What was likely exposed

The available facts state only that internal files were exfiltrated in a ransomware attack. No further breakdown of data types—such as customer lists, employee records, financial documents or product specifications—has been publicly disclosed. Organisations in the natural and health-product supply sector commonly hold contact details, order histories, contracts, payroll and HR files, and operational documents. Because the precise contents remain unconfirmed, it is not possible to state with certainty which categories of information, if any, were taken. Readers should treat any specific claims about named data sets as unverified unless corroborated by the company or independent investigators.

What's at stake

For individuals whose details may have been among internal files, the practical risks include unwanted contact, phishing attempts that exploit knowledge of business relationships, and, in some cases, identity-related fraud if personal identifiers were present. For Kadac Australia the consequences can include operational disruption, costs of investigation and remediation, potential regulatory notification obligations under Australian privacy law, and damage to commercial trust with suppliers and customers. Because the scale of the incident and the exact data involved are unknown, the full extent of these risks cannot yet be quantified. The absence of confirmed numbers does not eliminate the need for vigilance; it simply means the picture remains incomplete.

If your data was in this claimed breach

If you have a past or present relationship with Kadac Australia—as an employee, supplier, customer or partner—consider monitoring accounts and communications for unusual activity. Change passwords on any systems that may have been linked to the company, enable multi-factor authentication where available, and treat unsolicited messages that reference the company or its products with caution. You can also run a free exposure scan of your email address to check whether your information has already appeared in known breach data sets. Keep records of any suspicious contact and report confirmed identity misuse to the relevant authorities and financial institutions. Public detail on this incident remains limited, so continue to watch for official statements from the organisation itself.

AICompiled with AI assistance from public sources and published under our editorial standards.