Threat actors have claimed a cyber attack on an Australian automotive part importer, allegedly having exfiltrated data from its network.
Strategic Imports is an automotive part and battery importer based in Queensland, that operates business through its eBay store and its official website.
The company was listed on the dark web leak site of the Bavacai threat group, which is threatening to leak the data it allegedly stole from the company.
You’re out of free articles for this month
To continue reading the rest of this article, please log in.
While Bavacai did not disclose the nature of the incident or how it launched the alleged attack, it posted a file tree of what it claims is included in the stolen data. Currently, the threat group’s site is offline, but Cyber Daily previously observed a number of folders that the group claims contain sensitive business and personal data belonging to clients and staff.
Interestingly, a post by DeXpose also says that the MedusaLocker ransomware group also claimed responsibility for the incident.
Cyber Daily has reached out to Strategic Imports for more information.
Who are Bavacai and MedusaLocker?
Bavacai is a brand new ransomware actor that first appeared on May 5, 2026. The group currently has 16 victims across the US, UK, Brazil, Malaysia and Australia.
At this stage, being a brand new threat group, not much is known about their activity or origin.
MedusaLocker on the other hand has been active since November 2022, and currently has over 50 victims. The group is known to use Remote Desktop Protocol (RDP) configurations to gain access, as well as phishing and spam email campaigns with ransomware directly attached.
The group has observed long periods of inactivity, and is often grouped in with the Medusa ransomware group, which is a separate entity, according to reports.
Want to see more stories from trusted news sources?
Make Cyber Daily a preferred news source on Google.
Daniel Croft
Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.
Tags: