Perfection Fresh Listed by sarcoma Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 9 October 2024, the Australian produce company Perfection Fresh appeared on a listing by the sarcoma ransomware group. Public reporting states that internal files were exfiltrated in a ransomware attack; the number of people affected remains unknown and further technical details have not been disclosed. For a family-run agribusiness that handles supply-chain, employee and commercial information, any confirmed exposure of internal material raises practical concerns about privacy, operational continuity and potential secondary misuse of data.

At present the incident rests on the group’s claim and the limited public summary. No independent confirmation of the full scope, method or exact contents has been released, so the picture stays incomplete.

Inside the incident

Public records show only that Perfection Fresh was listed by sarcoma on 9 October 2024 under the headline indicating a ransomware attack involving exfiltration of internal files. No official statement from the company detailing discovery date, attack vector, encryption status or negotiation has entered the public domain. The volume of data taken, the systems affected and whether any ransom demand was paid all remain undisclosed. Because the sole concrete assertion is the group’s own listing, the incident must be treated as an unverified claim pending further evidence or company confirmation.

Who is sarcoma?

Sarcoma is a ransomware operation that has been observed conducting double-extortion campaigns: encrypting systems while also stealing data and threatening to publish it on a dedicated leak site if payment is not made. Like other groups in this category, it typically targets organisations across multiple sectors, posts victim names and sample files to pressure payment, and operates with a degree of anonymity that makes definitive attribution difficult. In this case the group claims to have listed Perfection Fresh after exfiltrating internal files; that claim has not been independently verified beyond the appearance of the listing itself. No additional statements attributed specifically to this victim—such as file counts, screenshots or deadlines—appear in the available public record.

About Perfection Fresh

Perfection Fresh is an Australian family-owned business that has operated for more than 45 years in the agricultural sector. Founded by Tony Simonetta and now employing over 1 000 staff, it grows and supplies premium fresh produce in partnership with the Australian farming community. The company describes itself as focused on flavour and quality, with a legacy handed down through the family since 1978. Organisations of this type routinely manage grower contracts, logistics data, employee records, customer orders and commercial pricing information. A breach involving internal files therefore carries consequences both for day-to-day operations and for the privacy of people whose details may be stored in those systems.

The information in question

The only data type named in public reporting is “internal files exfiltrated in a ransomware attack.” No further breakdown—such as whether the material includes employee personal details, supplier contracts, financial records or customer information—has been released. The number of individuals potentially affected is listed as unknown. Companies in the fresh-produce sector typically hold payroll and HR data, contact lists for growers and distributors, inventory systems and commercial correspondence. Until the exact contents are confirmed, it is not possible to state with certainty what categories of information left the organisation’s control.

Why it matters

If personal or commercial data were among the internal files, affected individuals could face risks of phishing, identity fraud or unsolicited contact. Employees might see payroll or contact details misused; suppliers or customers could experience competitive or privacy harm. For the organisation itself, the incident can disrupt operations, require forensic investigation and notification obligations under Australian privacy law, and damage trust with farming partners and staff. Because the scale remains unknown, the practical impact cannot yet be quantified, but any ransomware event involving data theft creates a period of uncertainty that must be managed carefully.

What to do if you're exposed

Anyone who has worked for, supplied or done business with Perfection Fresh should monitor bank and credit accounts for unusual activity, enable multi-factor authentication on email and financial services, and treat unexpected messages asking for personal or payment details with caution. If you receive notification from the company, follow its guidance on next steps. Readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets; this provides an early indication of wider exposure without cost. Stay alert for official updates from Perfection Fresh or relevant Australian regulators as more verified information becomes available.

AICompiled with AI assistance from public sources and published under our editorial standards.