Propane Levac Inc. targeted in claimed data leak by sarcoma

• Ransomware group: sarcoma
• Country: Canada
• Sector: Energy & Utilities
• Announcement date: January 23, 2026

Sarcoma group claims data breach against Propane Levac Inc.

The threat actor known as sarcoma has listed a data archive on their leak site that they claim belongs to Propane Levac Inc. This announcement, which serves as a claim of a successful data exfiltration, was published on January 23, 2026. While the group has asserted ownership over the stolen information, public information regarding the specific tactics and background of the sarcoma group remains limited.

Details of the claimed incident

According to the announcement made by the threat actor, the incident involves a significant volume of data. The group claims to have acquired a data archive totaling 45 GB in size. This type of activity is often associated with double extortion tactics, a common strategy used by modern ransomware groups. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information to a remote server. The threat actor then threatens to publish this data on a public leak site unless a ransom is paid, using the threat of exposure as leverage to increase the pressure on the victim.

Despite the claim regarding the total size of the archive, the listing provides no further granular details. Specifically, there is no detailed breakdown of the file types contained within the 45 GB archive, and no screenshots have been provided to verify the contents of the files. Furthermore, the group has not issued a specific ransom demand or provided any additional context regarding the nature of the intrusion.

The affected organization

Propane Levac Inc. is an energy company based in Canada. The organization specializes in the distribution of propane to meet residential, commercial, and agricultural needs. Their operational footprint covers the provinces of Ontario and Quebec, making them an essential provider within the regional energy and utilities sector.

Potential implications and security considerations

The claim made by sarcoma suggests a potential risk of exposure for the organization's operational data and customer information. Because Propane Levac Inc. operates within Canada, any confirmed data breach could fall under the regulatory scope of the Personal Information Protection and Electronic Documents Act (PIPEDA). If the leaked data is found to contain sensitive commercial information or customer records, the organization may face significant reputational damage and legal consequences.

There is also a secondary risk that the leaked data could be utilized by malicious actors for identity theft or targeted phishing attacks against the company or its clients. In the energy and utilities sector, such breaches can be particularly disruptive to business continuity and consumer trust.

To defend against such threats, organizations typically implement several layers of security. These include robust backup solutions to ensure data availability, multi-factor authentication to prevent unauthorized access, and continuous monitoring of network traffic to detect unusual data exfiltration patterns. Additionally, maintaining strict access controls and conducting regular security audits can help mitigate the impact of a potential breach. As the threat landscape evolves, staying informed about the activities of specific ransomware groups is a critical component of a proactive defense strategy.