LR Reed Hit by Kairos Ransomware Attack, 335GB of Data Allegedly Stolen
Melbourne-based property management firm LR Reed has been targeted in a ransomware attack by the Kairos group, which claims to have exfiltrated 335GB of sensitive data. The company, with over 30 years in the industry, was listed on Kairos’ dark web leak site, where the threat actors posted a sample of the stolen data including employee names, salary details, banking documents, and a passport scan.
Kairos has given LR Reed seven days before allegedly publishing the full dataset. While the group did not disclose details of the breach, a company spokesperson confirmed awareness of the claims and stated that customer data remains unaffected, as it was stored separately. LR Reed has engaged Australia’s ASD (Australian Signals Directorate) and the AFP (Australian Federal Police) to investigate the incident.
Kairos, a ransomware group first identified in November 2024, has rapidly expanded its operations, claiming attacks on at least 90 victims to date, per tracking site ransomware.live. The group is active on Russian-language hacking forums and has no confirmed ties to other cybercriminal organizations.
In April 2024 alone, Kairos targeted three Australian victims, including NSW-based Strata Republic, from which it claimed to have stolen 441GB of data. Leaked samples included employee reprimands, financial documents (with Tax File Numbers), driver’s licenses, and even a photo from a company event.
LR Reed’s case underscores the growing threat of ransomware groups like Kairos, which continue to target organizations across sectors particularly in Australia. The incident remains under investigation.
Strata Republic TPRM report: https://www.rankiteo.com/company/strata-real-estate-services-sydney
LR Reed TPRM report: https://www.rankiteo.com/company/lr-reed
"id": "strlr-1784773561",
"linkid": "strata-real-estate-services-sydney, lr-reed",
"type": "Ransomware",
"date": "7/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'None (customer data unaffected)',
'industry': 'Property Management',
'location': 'Melbourne, Australia',
'name': 'LR Reed',
'type': 'Company'}],
'customer_advisories': 'Customer data remains unaffected',
'data_breach': {'data_exfiltration': 'Yes (335GB)',
'file_types_exposed': ['Documents', 'Images'],
'personally_identifiable_information': 'Yes (employee data, '
'passport scans)',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Employee names',
'Salary details',
'Banking documents',
'Passport scans']},
'description': 'Melbourne-based property management firm LR Reed has been '
'targeted in a ransomware attack by the Kairos group, which '
'claims to have exfiltrated 335GB of sensitive data. The '
'threat actors posted a sample of the stolen data including '
'employee names, salary details, banking documents, and a '
'passport scan. Kairos has given LR Reed seven days before '
'allegedly publishing the full dataset.',
'impact': {'brand_reputation_impact': 'Potential reputational damage',
'data_compromised': '335GB',
'identity_theft_risk': 'High (employee data exposed)',
'payment_information_risk': 'High (banking documents exposed)'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain',
'ransomware': {'data_exfiltration': 'Yes (335GB)',
'ransomware_strain': 'Kairos'},
'references': [{'source': 'ransomware.live'}],
'response': {'law_enforcement_notified': 'Yes (AFP)',
'third_party_assistance': 'Australian Signals Directorate (ASD), '
'Australian Federal Police (AFP)'},
'threat_actor': 'Kairos',
'title': 'LR Reed Hit by Kairos Ransomware Attack, 335GB of Data Allegedly '
'Stolen',
'type': 'Ransomware'}