Radical Sportscars Listed by quantum Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

In December 2022, people connected to Radical Sportscars — customers, partners, staff or suppliers — faced the practical possibility that internal company material had left the organisation’s control. Public detail is limited: the number of people affected remains unknown, and the precise contents of any taken files have not been independently confirmed. What is known is that a ransomware group listed the firm and claimed to hold stolen internal data, which is enough to warrant careful attention from anyone who has shared personal or business information with the company.

This article sets out only what has been reported, places the claim in context, and outlines concrete steps for those who may be exposed. No assumption is made that the listing proves a full breach or that any particular record was published.

What happened

On or around 9 December 2022, Radical Sportscars appeared on the leak site operated by the ransomware group known as quantum. According to the reported summary, the group claimed to have exfiltrated internal files in a ransomware attack. No public figure has been given for the volume of data, the duration of any intrusion, or the method of initial access. The number of people affected is unknown. Independent confirmation of the theft or of any subsequent publication of the files has not been supplied in the available record; the listing itself stands as the group’s claim.

Who is quantum?

Quantum is a ransomware operation that has appeared in public reporting as a double-extortion group: it encrypts systems and simultaneously claims to steal data, then threatens to publish the material on a dedicated leak site if payment is not made. Like other groups in this category, it has listed organisations across multiple sectors, using the threat of exposure to increase pressure. Public knowledge of the group centres on this pattern of behaviour rather than on any unique technical signature disclosed in relation to Radical Sportscars. No statement from quantum beyond the listing and the general claim of stolen internal data is recorded in the facts for this incident; therefore nothing further is attributed to the group here.

Radical Sportscars and its sector

Radical Sportscars is a British manufacturer of high-performance sports and racing cars, operating in the specialist automotive and motorsport sector. Firms of this type typically hold customer and dealer contact details, order and configuration records, warranty and service histories, supplier contracts, employee information, and internal engineering or commercial documents. A breach affecting such an organisation is consequential because the data often mixes personal identifiers with commercial and technical material that can be reused for fraud, social engineering or competitive harm. The sector’s reliance on trusted relationships with owners, teams and parts suppliers means that any confirmed exposure can erode confidence even when the exact scope remains unclear.

What was likely exposed

The facts state only that internal files were claimed to have been exfiltrated in a ransomware attack. No inventory of file names, data categories or record counts has been published in the available report. Organisations of this kind commonly store the types of information listed below; whether any of them were among the material quantum claims to hold is unconfirmed.

• Customer and prospect contact details and purchase or enquiry records
• Dealer, distributor and supplier correspondence and contracts
• Employee or contractor personal and payroll-related data
• Internal operational, financial or engineering documents

Until verified disclosure occurs, the exact contents must be treated as unknown.

The real-world impact

For individuals, the main risks are opportunistic misuse of any contact or identity data that may have been included — phishing, credential-stuffing attempts, or targeted social engineering that references a genuine relationship with Radical Sportscars. For the organisation, the impact includes potential regulatory notification duties, the cost of investigation and remediation, and reputational damage among customers and partners who expect discretion with commercial and personal information. Because the scale and contents remain undisclosed, the practical severity cannot be quantified from public sources alone; the prudent course is to assume that internal material may have left the company’s control and to act accordingly.

What to do if you're exposed

If you have done business with Radical Sportscars, shared personal details, or worked with the company, treat the claim as a prompt to tighten everyday defences rather than as proof that your own records were taken. Change passwords on any accounts that reused credentials linked to the firm, enable multi-factor authentication where available, and watch for unexpected messages that cite Radical or motorsport orders. Monitor financial and email accounts for unusual activity. You can also run a free exposure scan of your email address to check whether it has already appeared in known breach datasets. Public detail on this incident remains limited; staying alert to official updates from the company or relevant authorities is the most reliable next step.

AICompiled with AI assistance from public sources and published under our editorial standards.