One Agency Eastlakes Listed by radar Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target professional service firms that sit on dense collections of personal and commercial records, using leak-site listings as leverage even when the full scope of an intrusion remains unclear. In this environment, a real-estate agency appearing on a threat actor’s site is a signal that clients, staff and counterparties should treat the claim seriously while waiting for verified detail.

On 17 October 2025 the group known as radar listed One Agency Eastlakes, a real-estate agency based in Swansea, New South Wales. Public reporting states that internal files were exfiltrated in a ransomware attack; the number of people affected is unknown and further technical particulars have not been released.

Inside the incident

According to the available record, One Agency Eastlakes was listed by the radar ransomware group on 17 October 2025. The listing asserts that internal files were taken during a ransomware attack. One Agency Eastlakes and UrbanX PTY LTD are described as sharing an Active Directory network infrastructure; a partial file list associated with urbanx.io was referenced on the group’s site. No confirmed figure for the volume of data, no precise intrusion date, and no public description of the initial access method have been supplied. The number of individuals whose information may have been involved remains unknown.

Who is radar?

Radar is a ransomware operation that follows the now-common double-extortion model: encrypting systems while also claiming to have stolen data, then threatening to publish the material if payment is not made. Groups of this type typically maintain dark-web leak sites where they post victim names, sample files and countdown timers. Public reporting over recent years has associated radar with opportunistic targeting of mid-sized organisations across multiple sectors rather than highly selective campaigns. In the present case the group claims to have listed One Agency Eastlakes and to have exfiltrated internal files; those assertions have not been independently verified in the material available.

About One Agency Eastlakes

One Agency Eastlakes is a real-estate agency located in Swansea, NSW 2281. It provides specialist services for buying, selling and renting residential and related property. Like most agencies of its kind, it routinely handles identity documents, contact details, financial information, tenancy records and correspondence with clients, landlords and other parties. The agency is noted as sharing Active Directory infrastructure with UrbanX PTY LTD, which can mean that a compromise of one environment may affect the other. A breach involving such an organisation is consequential because the data it holds is both personally sensitive and commercially valuable, and because property transactions often involve long-term records that remain useful to criminals long after a deal closes.

What data was at risk

The public facts state only that internal files were exfiltrated in a ransomware attack. Exact data types, file counts and whether client records, staff information or financial documents were among them have not been disclosed. Organisations in the real-estate sector typically store names, addresses, dates of birth, contact numbers, email addresses, identity-document copies, bank or payment details, tenancy agreements and property valuations. Until a fuller inventory is released, it is not possible to confirm which of these categories, if any, were involved. Readers should therefore treat the exposure as unconfirmed in its specifics while remaining alert to the possibility that personal or commercial material was taken.

Why it matters

For individuals, the practical risks include identity misuse, targeted phishing that references genuine property dealings, and unsolicited contact that appears to come from a trusted agent. For the agency and its related entity, the consequences can include operational disruption, regulatory notification obligations under Australian privacy law, reputational damage and the cost of forensic investigation and remediation. Because the two organisations share network infrastructure, the impact may extend beyond a single brand. The absence of a confirmed head-count of affected people does not reduce the need for caution; unknown scale simply means that anyone who has dealt with the agency or UrbanX should monitor for unusual activity.

Were you affected?

If you have bought, sold or rented through One Agency Eastlakes, or have had dealings with UrbanX PTY LTD, treat the listing as a prompt to take basic protective steps. Exact confirmation of individual exposure is not yet available, so the following actions remain prudent:

• Monitor bank and credit-card statements for unexpected activity and consider a credit-file check with an Australian bureau.
• Be alert to phishing or phone calls that reference property transactions, tenancy details or identity documents you may have supplied.
• Change passwords for any accounts that reused credentials associated with the agency, and enable multi-factor authentication where available.
• Retain copies of any correspondence or notices you receive from the agency so you can compare them with official updates.

You can also run a free exposure scan of your email address to check whether that address has already appeared in known breach data sets. Doing so provides an additional, independent signal while official notifications, if any, are prepared.

AICompiled with AI assistance from public sources and published under our editorial standards.