Skip to content
Leak-site post naming MACMA Werbeartikel oHG, captured by ThreatCluster

MACMA Werbeartikel oHG

sarcoma

Ransomware leak-site victim intelligence

Data size
285 GB Archive
Files
1
Views
68,145
Posted
Sep 25, 2025
Country
Germany
Industry
Manufacturing

Summary

Written by ThreatClusterfrom victim profile, leak post

Sarcoma claims to have exfiltrated a 285 GB archive from MACMA Werbeartikel oHG (domain macma.de), a German manufacturing company. The leak post is published on the group's site. The page does not specify the exact data types included in the archive.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

MACMA is one of the largest promotional product importers in Europe, serving as a supplier and partner to the promotional products trade. The company prides itself on being capable, fast, and reliable, with over 400 employees dedicated to ensuring customer satisfaction. Their extensive product range includes writing instruments, tools, travel accessories, and various promotional items designed to enhance customer engagement. MACMA focuses on providing high-quality products and efficient service to resellers in the promotional merchandise sector.

File types seen
zip × 1
Sample files (1)
MEH.local.zip

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

label
MEH.local.zip 19-Sep-2025 08:18 306277591105

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture