Powered by MOMENTUMMEDIA
For breaking news and daily updates, subscribe to our newsletter

Exclusive: Aussie car parts importer Strategic Imports allegedly breached by threat actors

Threat actors have claimed a cyber attack on an Australian automotive parts importer, allegedly having exfiltrated data from its network.

Thu, 07 May 2026
Exclusive: Aussie car parts importer Strategic Imports allegedly breached by threat actors

Strategic Imports is an automotive parts and battery importer based in Queensland that operates business through its eBay store and its official website.

The company was listed on the dark web leak site of the Bavacai threat group, which is threatening to leak the data it allegedly stole from the company.

While Bavacai did not disclose the nature of the incident or how it launched the alleged attack, it posted a file tree of what it claims is included in the stolen data. Currently, the threat group’s site is offline, but Cyber Daily previously observed a number of folders that the group claims contain sensitive business and personal data belonging to clients and staff.

 
 

Interestingly, a post by DeXpose said the MedusaLocker ransomware group also claimed responsibility for the incident.

Cyber Daily has reached out to Strategic Imports for more information.

Who are Bavacai and MedusaLocker?

Bavacai is a brand-new ransomware actor that first appeared on 5 May 2026. The group currently has 16 victims across the US, UK, Brazil, Malaysia, and Australia.

At this stage, being a brand-new threat group, not much is known about its activity or origin.

MedusaLocker, on the other hand, has been active since November 2022 and currently has over 50 victims. The group is known to use Remote Desktop Protocol (RDP) configurations to gain access, as well as phishing and spam email campaigns with ransomware directly attached.

The group has observed long periods of inactivity and is often grouped with the Medusa ransomware group, which is a separate entity, according to reports.

Cyber DailyWant to see more stories from trusted news sources?
Make Cyber Daily a preferred news source on Google.

Daniel Croft

Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.
Tags: