One Agency Eastlakes listed on radar ransomware leak site

• Ransomware group: radar
• Country: Australia
• Sector: Retail & E-Commerce
• Announcement date: October 17, 2025

One Agency Eastlakes targeted by radar ransomware group

The threat actor known as radar has listed the Australian organization One Agency Eastlakes on their leak site. This announcement, made on October 17, 2025, marks a potential data breach involving the real estate agency. While the listing confirms the organization's presence on the leak site, the specific details regarding the volume of data or the exact nature of the stolen files remain unconfirmed by the source.

Details of the alleged attack

According to the claims made by the radar group, the incident involves the institution One Agency Eastlakes. A significant detail provided by the threat actor is the allegation that the institution shares an Active Directory network infrastructure with UrbanX PTY LTD. This shared infrastructure suggests a potential interconnectedness that could expand the scope of the incident.

To support their claims of a successful breach, the threat actor has suggested that they may provide file lists associated with the institution as proof of the leak. Such tactics are common in modern cyberattacks, where groups use partial data or directory listings to demonstrate the validity of their claims to both the victim and the public.

Information regarding the leaked data

At this stage, there is no definitive information regarding the specific nature of the leaked data. The announcement focuses primarily on the institution's network infrastructure and the potential for file lists to be released. No screenshots have been provided to substantiate the claims at this time. The listing names no specific data types.

About One Agency Eastlakes

One Agency Eastlakes is a real estate agency operating in the Swansea area of New South Wales, Australia. The company provides specialized services for buying, selling, and renting properties. Given its role in the real estate sector, the agency handles sensitive information related to property transactions and client engagements.

Security implications and risks

This incident may indicate that the institution's network infrastructure and shared data could have been exposed to unauthorized third parties. The claim that an Active Directory infrastructure is shared between organizations poses significant risks to supply chain security and could potentially facilitate secondary attacks against the connected entities. When network infrastructures are linked, a compromise in one organization can create a pathway into another.

Furthermore, the organization may face legal proceedings under the Privacy Act 1988 in Australia due to obligations regarding the protection of personal data. If a data breach has indeed occurred, the risks to the community are notable; customers and employees may face threats such as identity theft or targeted phishing attacks. Information regarding the radar group remains limited, making it difficult to determine their full capabilities or typical patterns.

In the broader context of cybersecurity, ransomware leak sites are often used in double extortion schemes. In these scenarios, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten the victim with public disclosure. This pressure is designed to coerce the organization into paying a ransom to prevent the leak of confidential files. To defend against such threats, organizations typically implement robust security measures, such as multi-factor authentication, regular network segmentation, and comprehensive employee training to recognize phishing attempts. Maintaining strict access controls and monitoring network traffic for unusual activity are also standard defensive steps to mitigate the risk of unauthorized access to critical infrastructure like Active Directory.