waive.com.au Listed by ransomhub Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have used or worked with waive.com.au may now face uncertainty about whether their personal or account details sit among files claimed to have been taken in a ransomware attack. Public reporting so far does not say how many individuals are involved or exactly which records left the organisation’s systems, so the practical risk for any one person remains hard to measure.

What is known is that the Australian mobility company was listed by the ransomware group RansomHub on 18 November 2024. The listing asserts that internal files were exfiltrated. Until more detail is confirmed by the company or independent investigators, anyone connected to the service is left weighing incomplete information and deciding what protective steps make sense.

Inside the incident

On 18 November 2024, waive.com.au appeared on a leak site operated by the RansomHub ransomware group. The group claims that internal files were exfiltrated during a ransomware attack. No further technical details—such as the initial access method, the precise date the intrusion began, the volume of data taken, or whether encryption of systems also occurred—have been made public in the available record.

The number of people whose information may be involved is listed as unknown. No confirmation from waive.com.au itself, no independent forensic summary, and no statement of whether negotiations took place appear in the facts provided. The incident therefore rests, for now, on the group’s unverified claim of a successful data theft.

Who is ransomhub?

RansomHub is a ransomware-as-a-service operation that became publicly active in early 2024 after the disruption of earlier groups such as ALPHV/BlackCat. It typically recruits affiliates who gain access to target networks, deploy ransomware, and exfiltrate data before encryption. The group’s model relies on double extortion: victims are pressured both by operational disruption and by the threat of public data release on a dedicated leak site.

Public reporting on RansomHub has documented attacks across multiple sectors and countries. The group commonly posts victim names, sample files, and countdown timers to encourage payment. In this case, the listing of waive.com.au constitutes a claim by the group; it has not been independently verified in the material available here. No specific ransom demand amount or negotiation outcome for this victim has been disclosed.

Who is waive.com.au?

waive.com.au is an Australian company that provides electric-vehicle sharing and rental services. Its platform lets users locate, book and use electric cars as an alternative to private ownership, with an emphasis on lower-emission urban transport. Organisations of this type typically maintain customer accounts, booking histories, payment details, vehicle telemetry, and internal operational records.

A breach affecting such a service can reach both end users who rely on the platform for daily mobility and staff or partners whose work data resides on company systems. Because the company sits at the intersection of consumer transport and digital booking infrastructure, any confirmed exposure of internal files raises questions about the security of the personal and financial information that mobility platforms routinely process.

The information in question

The only data category named in the available facts is “internal files exfiltrated in ransomware attack.” No inventory of specific file types, customer records, employee data, or financial documents has been published. Exact contents therefore remain unconfirmed.

Companies offering vehicle-sharing services commonly hold names, contact details, driver’s-licence information, payment-card or billing data, trip histories, and internal business documents. Whether any of those categories were among the files RansomHub claims to possess is not established. Until waive.com.au or a competent authority releases a verified list, the precise nature of the exposure cannot be stated as fact.

What's at stake

For individuals, the main risks are identity misuse, targeted phishing that references real booking or account details, and potential fraud if payment or licence information was included. Because the scale and exact contents are unknown, the probability of any single person being affected cannot be quantified from public sources.

For the organisation, the listing itself creates reputational pressure, possible regulatory scrutiny under Australian privacy rules, and the operational cost of investigation and customer notification. Even if systems were not encrypted, the claimed exfiltration of internal files can erode trust among users who depend on the service for everyday transport.

What to do if you're exposed

Anyone who has held an account with waive.com.au or supplied personal information to the company can take a few measured steps while waiting for official confirmation:

• Monitor bank and credit-card statements for unfamiliar charges and enable transaction alerts where available.
• Treat unexpected emails or messages that reference vehicle bookings or account details with caution; verify them through official channels rather than links in the message.
• Consider placing a credit freeze or fraud alert with Australian credit-reporting bodies if you believe sensitive identity documents may have been involved.
• Change passwords for any accounts that reused credentials associated with the service, and enable multi-factor authentication wherever possible.
• Run a free exposure scan of your email address against known breach data sets to see whether your address has already appeared in other incidents; this does not confirm involvement in the waive.com.au matter but can highlight wider exposure.

Public detail remains limited. Further statements from the company or Australian authorities will be needed before the full scope of the incident can be assessed with certainty.

AICompiled with AI assistance from public sources and published under our editorial standards.