DMG Contractors targeted by sarcoma ransomware group

• Ransomware group: sarcoma
• Country: United States
• Sector: Professional Services
• Announcement date: June 4, 2025

The sarcoma ransomware group has claimed responsibility for a data breach involving DMG Contractors. According to an announcement posted on the group's leak site, the threat actor alleges that they have successfully compromised the digital assets of the organization and intend to publish the stolen information.

Details of the alleged attack

The announcement made by the sarcoma group indicates that the breach occurred on 2025-06-04. The group claims to have gained unauthorized access to the organization's digital environment, allowing them to extract a significant amount of information. This type of activity is characteristic of modern ransomware operations, where attackers often employ double extortion tactics. In these scenarios, threat actors not only encrypt an organization's systems to disrupt operations but also steal sensitive data to use as leverage, threatening to leak it publicly if a ransom is not paid.

While the group has officially listed the organization on their leak site, they have not provided specific details regarding the method of entry or the exact nature of the breach. The announcement serves as a public claim of the successful exfiltration of data, signaling an intent to release the files to the public domain.

Data involved in the claim

The sarcoma group claims that the volume of data stolen consists of a 113 GB archive. Despite the significant size of the reported data, the group has not provided a specific file list or any screenshots that would detail the exact contents of the archive. Consequently, the specific types of files or the exact nature of the information contained within the 113 GB remains unknown at this time.

• No specific data types or file categories were named in the listing.

About DMG Contractors

DMG Contractors is a professional services firm established in 1987. The company operates within the construction industry, specifically focusing on the multi-family housing sector across the United States. Their service portfolio includes providing capital improvements, major renovations, and insurance restoration services. The firm specializes in both exterior renovations and interior updates, such as remodeling kitchens and bathrooms for various apartment communities.

Risk assessment and implications

This alleged data leak poses potential risks to the organization's operational continuity and its reputation management. Because the specific contents of the 113 GB archive have not been disclosed, the potential exposure of sensitive employee or client information cannot be ruled out. For an organization operating within the United States, a confirmed data breach could trigger various state-level data protection laws and mandatory notification requirements.

Beyond the immediate impact on the company, there are secondary risks associated with such leaks. The stolen data could potentially be utilized by malicious actors for identity theft or for launching highly targeted phishing attacks against the organization's contacts or employees. Such attacks often leverage the context of the leaked information to appear more legitimate and increase the success rate of the social engineering attempt.

In the professional services and construction sectors, maintaining data integrity and confidentiality is vital for client trust. Organizations in this sector can take several defensive steps to mitigate the impact of such threats. Implementing robust access controls, maintaining regular offline backups, and conducting regular security awareness training are common industry practices. Furthermore, monitoring for unauthorized data exfiltration and ensuring compliance with regional data protection regulations can help organizations respond more effectively to potential incidents. As public information regarding the sarcoma group remains limited, the situation remains an evolving threat to the targeted entity.