Ransomware Group: SARCOMA

VICTIM NAME: Inox Laghi

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SARCOMA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On August 27, 2025, the leak page centers on Inox Laghi, an Italian manufacturing company. The post describes Inox Laghi as operating across multiple industrial sectors—chemical, pharmaceutical, textile, petrochemical, food, paper, energy, ecology and environmental industries—as part of its international trade footprint. The page states that a 384 GB archive has been leaked and that the archive allegedly contains files, SQL databases, and Exchange data. A claim URL is provided in the post, which is a common feature of ransomware leak postings; however, the available excerpt does not specify any ransom amount or clearly label the attack as encrypted. The post date is listed as 2025-08-27 04:39:10.108058.

The page presents no visible screenshots or image assets. There are no downloadable items indicated, and no contact details such as emails, phone numbers, or addresses are shown in the excerpt, with PII redacted as appropriate. The 384 GB archive is described as containing a mix of data types—files, SQL databases, and Exchange data—suggesting a data exfiltration scenario rather than a straightforward encryption event. The narrative remains focused on Inox Laghi, with no further company names elaborated in the excerpt, and no ransom figure is provided within the available content.