Storm Ransomware Group Targets Victorian Businesses via Third-Party Providers

• •Storm ransomware group has targeted multiple Victorian businesses through third-party providers.
• •Macquarrie Corporation and Penfold Motors confirmed data breaches involving sensitive customer information.
• •Both companies are cooperating with cybersecurity experts and regulatory authorities in response to the incidents.

The Storm ransomware group has launched attacks on multiple Victorian businesses, including Macquarrie Corporation and Penfold Motors, exploiting vulnerabilities in external technology providers. Macquarrie Corporation confirmed a breach on September 1, 2026, with data already leaked on the dark web, including sensitive employee and customer information. Penfold Motors, another victim, reported a cyber incident on September 7, revealing compromised customer and vehicle details. Both companies have engaged cybersecurity experts and notified affected individuals while cooperating with regulatory authorities. The Storm group, which emerged in August 2026, has targeted over 50 victims primarily in the automotive and machinery sectors, raising concerns about the security of third-party service providers.