Volumex Lease listed on radar ransomware leak site

• Ransomware group: radar
• Country: Belgium
• Sector: Transportation
• Announcement date: September 15, 2025

The Belgium-based transportation company Volumex Lease has been listed on a leak site by the threat actor group known as radar. The announcement, which appeared on September 15, 2025, indicates a potential data breach involving the organization.

The claims made by radar

The threat actor group known as radar has officially listed Volumex Lease on its dedicated leak platform. In the announcement, the group claims that data belonging to the organization has been compromised. This type of activity is common in modern cyberattacks, where groups often employ double extortion tactics. In such scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information to pressure the victim into paying a ransom by threatening to release the data publicly.

Despite the listing, the announcement remains vague regarding several key details. No specific information has been provided regarding a ransom demand, nor has the volume of the leaked data been disclosed. The group has not provided any screenshots or specific evidence to support their claims in the initial announcement.

Information regarding the compromised data

At this stage, the specific nature of the leaked or threatened data remains unknown. The listing does not specify what types of files or information were targeted during the alleged intrusion. Furthermore, the group has not provided any visual confirmation or documentation to verify the contents of the breach.

The listing names no specific data types.

About Volumex Lease

Volumex Lease is a company based in Belgium that specializes in the leasing of various commercial vehicles. Their service offerings include the leasing of vans, trucks, tractors, and trailers. The company maintains an operational presence across multiple locations, including Hoeselt, Fléron, and Beringen.

Potential risks and organizational implications

This incident may pose significant risks to the organization's operational continuity and customer trust. Depending on the actual content of the compromised data, the organization may face legal processes due to data protection obligations under the General Data Protection Regulation (GDPR). If the compromised data is found to include employee or customer information, secondary risks such as identity theft or targeted phishing attacks may be observed.

Publicly available information regarding the group known as radar is currently limited. For organizations facing similar threats, it is advisable to evaluate data breach notification obligations and conduct a thorough review of existing security measures. Common defensive steps for organizations include maintaining robust backup systems, implementing multi-factor authentication, and ensuring continuous monitoring of network traffic to detect unauthorized access early.

General context on leak sites and extortion

Ransomware leak sites serve as a public gallery for threat actors to exert pressure on victims. By publishing the names of companies they have targeted, these groups aim to damage the reputation of the victim and increase the likelihood of a ransom payment. The shift toward data exfiltration—where the primary leverage is the threat of a leak rather than just system encryption—has made data protection and breach response protocols a critical component of modern cybersecurity strategy.