RISE Racing data allegedly leaked by sarcoma group

• Ransomware group: sarcoma
• Country: Australia
• Sector: Professional Services
• Announcement date: June 4, 2025

RISE Racing targeted in alleged data breach by sarcoma group

The threat actor known as sarcoma has announced the publication of a data archive allegedly belonging to RISE Racing on their leak site. According to the announcement made on June 4, 2025, the group claims to have obtained data belonging to the organization on the same day. This incident is characterized as a data leak, where the threat actor has posted information on a dedicated leak site to pressure the victim.

Details of the alleged attack

The threat actor known as sarcoma has claimed that the data was obtained on June 4, 2025. The announcement on their leak site indicates that the group has published a data archive that they assert belongs to RISE Racing. Ransomware groups often utilize leak sites as a tool for double extortion, a tactic where attackers not only encrypt an organization's systems but also threaten to release sensitive information to the public to increase pressure for ransom payments.

The specific circumstances surrounding the initial access or the exact method used by the sarcoma group to infiltrate the network remain unknown. While the group has made these claims, the incident highlights the ongoing risks faced by digital service providers in specialized industries. Such attacks often aim to disrupt business operations and damage the reputation of the targeted entity by exposing internal information.

Data involved in the leak

The leaked data is said to consist of a 1.6 GB archive file. Because no screenshots were provided by the threat actor in the announcement, the specific details regarding the content of the files cannot be determined at this time. The listing names no specific data types within the archive.

Potential risks and implications

This incident may indicate that a security vulnerability occurred within the organization's digital infrastructure. Depending on the nature of the leaked data, secondary risks such as identity theft or targeted phishing attacks may emerge for the stakeholders served by the organization. Such secondary attacks often follow a breach, as criminals use stolen information to craft highly convincing fraudulent communications.

Furthermore, a potential breach in the organization's systems may affect operational continuity and result in reputational damage. Under Australian data protection regulations, the organization may face notification obligations, which could lead to legal proceedings. Public information regarding the sarcoma group is limited, making it difficult to attribute the attack or understand the group's specific motivations beyond the claim of data theft.

Defensive considerations for professional services

Organizations operating as data and systems providers must maintain robust security postures to protect the information of their clients and stakeholders. Common defensive steps for organizations in this sector include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent vulnerability assessments to identify weaknesses in the digital infrastructure. Strengthening monitoring capabilities can also help in detecting unauthorized access before data can be exfiltrated.

About RISE Racing

RISE Racing is an organization that operates as a data and systems provider for the Australian harness racing industry. It provides digital innovation solutions for racing authorities, clubs, owners, and breeders.