Brotherhood ransomware group lists Kevmor on leak site

• Ransomware group: Brotherhood
• Country: Australia
• Sector: Professional Services
• Announcement date: October 10, 2025

Brotherhood claims to have stolen data from Kevmor

The threat actor group known as Brotherhood has officially listed the Australian organization Kevmor on its dedicated leak site. According to the announcement made on October 10, 2025, the group claims to be in possession of significant amounts of data belonging to the company. This development follows a pattern common in modern cyberattacks where threat actors utilize leak sites to pressure victims through the threat of public exposure.

The group's announcement suggests that a process for the publication or the sale of this stolen information has already been initiated. While the specific circumstances surrounding the initial access remain unknown, the listing of a target on a leak site is a hallmark of double extortion tactics. In such scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information to use as leverage during ransom negotiations.

Details of the alleged data breach

The Brotherhood group claims to have acquired approximately 45 GB of compressed data allegedly belonging to Kevmor. The volume of data suggests a substantial breach of the organization's digital environment. While the group has not provided a specific file count or a ransom demand, the scale of the claimed data indicates a significant potential impact on the victim's information security posture.

Based on the claims made by the threat group, the stolen information is said to consist of various file types and sensitive contents. The alleged data includes:

• Databases
• Email contents
• Compressed files

The presence of databases and email contents is particularly concerning for any organization, as these often contain the core intellectual property, client information, and internal communications necessary for daily business operations.

About Kevmor

Kevmor is an Australia-based company operating within the professional services sector. The organization specializes in the supply of professional tools and equipment designed for the flooring, tiling, and construction industries. Their expertise lies specifically in providing equipment used for floor preparation, installation, and maintenance processes.

Potential risks and organizational implications

This leak claim may pose significant risks to Kevmor's operational continuity and overall data privacy. The exposure of sensitive email and database contents can lead to severe secondary consequences, such as identity theft or the execution of targeted phishing attacks against both employees and customers. When attackers possess internal communications, they can craft highly convincing social engineering campaigns that appear legitimate to unsuspecting recipients.

Furthermore, because the organization operates within Australia, a confirmed data breach may trigger specific legal obligations under the Australian Privacy Act 1988. Organizations facing such threats must navigate complex regulatory landscapes regarding mandatory breach notifications and data protection standards.

In response to such incidents, it is often beneficial for an organization to initiate a comprehensive forensic investigation. Such an investigation is necessary to determine the true nature and scope of the data that has been allegedly compromised. For organizations in the professional services and construction supply sectors, maintaining robust security hygiene, such as implementing multi-factor authentication, conducting regular backups, and monitoring for unauthorized access, remains a critical defensive strategy against evolving ransomware threats.