Storm Ransomware Group Strikes Third Australian Victim, Leaks Sensitive Data
The Storm ransomware group, which surfaced earlier this month, has claimed its third Australian victim, Westco Motors Cairns, after allegedly breaching the company’s systems. On 17 August, the hackers posted details of the attack on their darknet leak site, threatening to publish stolen data on 12 October an unusually extended deadline for ransom negotiations.
While Storm has not disclosed the ransom demand or the total volume of stolen data, it has already released over a dozen documents, including vehicle identification numbers, tax invoices, and customer contact details (email addresses and phone numbers). Westco Motors, a BMW and MINI dealership based in Tropical North Queensland, has not responded to requests for comment.
Since its emergence, Storm has listed 26 alleged victims, with three in Australia including Ramsey Bros, targeted around the same time as Westco Motors. The group positions itself as a "premier, results-driven firm" at the intersection of finance and cyber operations, explicitly avoiding targets in the Commonwealth of Independent States (CIS). Storm is also actively recruiting affiliates, seeking "dedicated specialists" to join its operations.
Westco Motors, which markets itself as the largest prestige car dealership in the region, offers vehicle sales, servicing, and financial services. The breach underscores the growing threat posed by Storm, a new but rapidly expanding ransomware operation.
Ramsey Bros cybersecurity rating report: https://www.rankiteo.com/company/ramseybros
Westco Motors - Cairns cybersecurity rating report: https://www.rankiteo.com/company/westco-motors-cairns
"id": "RAMWES1787549135",
"linkid": "ramseybros, westco-motors-cairns",
"type": "Ransomware",
"date": "8/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Automotive (Vehicle Dealership)',
'location': 'Tropical North Queensland, Australia',
'name': 'Westco Motors Cairns',
'size': 'Large (largest prestige car dealership in the '
'region)',
'type': 'Business'}],
'data_breach': {'data_exfiltration': 'Yes',
'file_types_exposed': ['Documents'],
'personally_identifiable_information': 'Yes (email addresses, '
'phone numbers)',
'sensitivity_of_data': 'High (personally identifiable '
'information)',
'type_of_data_compromised': ['Vehicle identification numbers',
'Tax invoices',
'Customer contact details']},
'date_publicly_disclosed': '2023-08-17',
'description': 'The Storm ransomware group claimed its third Australian '
'victim, Westco Motors Cairns, after breaching the company’s '
'systems. The hackers posted details of the attack on their '
'darknet leak site, threatening to publish stolen data on 12 '
'October. The group has released over a dozen documents, '
'including vehicle identification numbers, tax invoices, and '
'customer contact details.',
'impact': {'brand_reputation_impact': 'Potential brand reputation damage',
'data_compromised': 'Vehicle identification numbers, tax invoices, '
'customer contact details (email addresses and '
'phone numbers)',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Storm'},
'references': [{'date_accessed': '2023-08-17',
'source': 'Darknet leak site (Storm ransomware group)'}],
'threat_actor': 'Storm ransomware group',
'title': 'Storm Ransomware Group Strikes Westco Motors Cairns',
'type': 'Ransomware'}