3-point Australia listed on Storm ransomware leak site

• Ransomware group: Storm
• Country: Australia
• Announcement date: August 14, 2026

Storm ransomware group claims data breach at 3-point Australia

The threat group known as Storm has listed 3-point Australia on their leak site, claiming to have exfiltrated the organization's data. This announcement, which appeared on the group's platform, suggests that the consultancy firm has been targeted in a recent cyberattack.

Details of the alleged attack

According to the announcement published on the Storm leak site, the group claims to have compromised the data belonging to 3-point Australia. The group published this leak announcement on August 13, 2026, and the listing was subsequently made available on their site on August 14, 2026.

At the time of the announcement, the group has not provided a detailed file list regarding the allegedly exfiltrated data. Ransomware groups often use leak sites to pressure victims by demonstrating that they have successfully breached a network and stolen sensitive information. These sites serve as a public gallery of victims, where the threat actors host announcements to claim credit for the breach and to demand payment from the targeted entities.

Data involved in the incident

The nature of the allegedly exfiltrated data remains unclear. The provided screenshot associated with the claim does not contain a file list, and the listing names no specific data types.

About 3-point Australia

3-point Australia is a private consultancy firm specializing in project management and construction delivery. They provide independent client representation, strategic planning, and end-to-end project delivery services to their clients.

Risk assessment and potential implications

This incident may pose risks to the organization's operational processes and commercial reputation. Given the legal obligations regarding the protection of personal data under the Australian Privacy Act 1988, the organization may face regulatory scrutiny. Should the data be published, secondary risks such as identity theft or targeted phishing attacks against employees and clients may emerge.

Public information about the Storm group is limited, and it is assessed that the group may employ double-extortion tactics. Double extortion is a common ransomware tactic where attackers not only encrypt a victim's files to disrupt operations but also steal sensitive data beforehand. The attackers then threaten to leak this stolen information on public forums or leak sites unless a ransom is paid. This method increases the pressure on the victim, as even if the organization can restore its systems from backups, the threat of a data leak remains a significant risk to their reputation and legal standing.

In general, when organizations face such threats, common defensive steps include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training for employees. Organizations in the consultancy and construction sectors often deal with sensitive project details and client information, making them potential targets for such extortion-based attacks.