Exclusive: Victoria-based Agrimac latest alleged Storm ransomware victim

Storm, as a rule, does not appear to share details of its ransom demands, nor details of the volume of data that it claims to have exfiltrated. It does, however, publish at least a dozen documents as evidence of the hack.

In this case, Storm has shared 16 documents, which include clock-in and payroll information, customer contact details, a risk assessment, and sales invoices. According to the site’s ticker, the page has been viewed 934 times since it was first posted last week.

Agrimac has not responded to Cyber Daily’s request for comment.

Who is Storm?

Storm only emerged as a potential threat in August, although in that time the group has posted the details of 41 alleged victims, with five of them Australian, including Ramsey Bros and Westco Motors Cairns.

The Sharp Motor Group was another victim, which confirmed it was responding to a cyber security incident last week.

VIEW ALL

“Sharp Motor Group is aware that our third-party IT provider has been involved in a cyber incident,” a company spokesperson told Cyber Daily. Few of Storm’s victims have been as forthcoming, however, so it is impossible to tell if they, too, were victims of third-party hacks.

So far, most of the group’s Australian victims have been automotive or farm machinery dealers.

Storm describes itself as a “premier, results-driven firm operating at the intersection of high finance and specialised strategic services”.

Who is Agrimac?

Based in Victoria, Agrimac operates three agricultural machinery dealerships in Warrnambool, Hamilton, and Horsham.

The firm specialises in Kubota and Krone machinery, sells new and used machinery, and provides parts and servicing.

Agrimac employs more than 40 staff.