Ransomware victim disclosure
← All victimsPalmers Relocations
Claimed by medusalocker · listed 15 days ago
Status timeline
- Listed
May 5, 2026
- Data leaked
At a glance
- Group
- medusalocker
- Status
- Data leaked
- Country
- GB
- Sector
- Transportation/Logistics
- Listed on leak site
- May 5, 2026
About the victim
AI dossier — public-source company profilePalmers Relocations is an Australian international removals and relocation company operating in the Melbourne area, with locations in Pascoe Vale, Dandenong, and Caulfield. The company is FIDI accredited and ISO 9001:2015 certified, offering services including household moves, storage, customs clearance, and immigration assistance (IMMI/VEVO). It specialises in international household goods relocations.
- Industry
- International Removals & Relocation Services
- Address
- Pascoe Vale / Dandenong / Caulfield, Melbourne, Victoria, Australia
Attack summary
Severity: high — Data has been confirmed published by the group. The company handles immigration/visa records (IMMI/VEVO) and customs documentation, which constitute sensitive personal and regulatory data. Exfiltration of such records affecting individual clients represents significant privacy and regulatory risk, warranting a high severity classification.The MedusaLocker group claims to have attacked Palmers Relocations and has published data ('data_published' status), indicating exfiltration of company data; the specific volume or nature of files published has not been detailed in the post.
Data the group says was taken
AI dossier — extracted from the leak post- Customer personal information
- Immigration and visa records (IMMI/VEVO)
- Customs documentation
- Household move records
- Storage records
- Business operational data
What the group claims
Australian international removals & relocation company. FIDI accredited, ISO 9001:2015 certified. Services: household moves, storage, customs, immigration (IMMI/VEVO). Operates Melbourne area (Pascoe Vale, Dandenong, Caulfield).
The leak post
captured from the group's siteFile Manager File Manager home page BARAAAI Data is being prepared for publication. BAPAMAI Data is being prepared for publication. BAUARAI Data is being prepared for publication. BAVADAI Data is being prepared for publication. BAVACAI Data is being prepared for publication. BAVAQAI Data is being prepared for publication. Raycolighting DEMO 3137 S Alameda Street, Los Angeles, CA 90058, USA $10 000 Organization with 2 emails extracted. Domain: raycolighting.com baralai Data is being prepared for publication. CEAGESP / Netfeirasp DEMO São Paulo, Brazil $20 000 Brazilian produce wholesale market network. Domain netfeirasp.ceagesp (CEAGESP). Also demarchibrasil.com.br accounts. Colegio María Inmaculada (CMI) DEMO Moravia, San José, Costa Rica $50000 Catholic school in Moravia, Costa Rica. Domain cmi.local / mariainmaculada.ed.cr. Servers: CMI-DC01, CMI-APP, CMI-HTTP2, main-server1/2. Académie de Montpellier / CSJM DEMO Béziers, Occitanie, France $15000 French public school network. Domain CSJM.BEZIERS, part of Académie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials. Palmers Relocations DEMO Victoria, Australia $63 000 Australian …
Sources
Source
Indexed 15 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
