Ransomware Group: SARCOMA

VICTIM NAME: Norgeshus

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SARCOMA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak report pertains to Norgeshus, a company specializing in custom home construction and design services in Norway. The leak was discovered on June 4, 2025, and includes a significant volume of compromised data, estimated at 78 gigabytes. The archive contains various sensitive files, including SQL databases, Exchange email data, and other operational documents, indicating a substantial breach of company information. While the leak does not specify the attack date, the publication date is available, and the leak appears to be part of a broader effort by the threat group identified as “sarcoma.” The released data may contain internal communications, technical documentation, and client information, posing potential risks to the company and its stakeholders.

The leak page indicates the presence of download links for the compromised files, though specific URLs are not provided in this summary. The breach’s data set may include internal files, SQL databases, and potentially sensitive project information, which could impact Norgeshus’s operations and reputation. The leak does not specify particular images or screenshots; however, references to the archive suggest that internal documents and possibly project visuals are included. The company operates in the construction industry within Norway, emphasizing their dedication to customized solutions, quality, and professional expertise. The incident highlights the importance of cybersecurity measures in protecting sensitive operational and client data from cybercriminal threats.