GLOBALMalwareProfessional ServicesProfessional ServicesRansomwareSarcomaRansom DemandedActor NamedMedium

MACMA Werbeartikel oHG

bd_dfbdc104546be875 · schema v1 · pii pii-v1

Full breach record for MACMA Werbeartikel oHG →

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Sarcoma on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: Business ServicesDiscovered: 2025-09-25

View aggregator listing on ransomware.live

Source: Ransomware.live

Post text · scraped from the leak site

MACMA Werbeartikel oHG MACMA is one of the largest promotional product importers in Europe, serving as a supplier and partner to the promotional products trade. The company prides itself on being capable, fast, and reliable, with over 400 employees dedicated to ensuring customer satisfaction. Their extensive product range includes writing instruments, tools, travel accessories, and various promotional items designed to enhance customer engagement. MACMA focuses on providing high-quality products and efficient service to resellers in the promotional merchandise sector.Geo: Germany - Leak size: 285 GB Archive - Contains: Files

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

No regulatory filing corroborates this yet. If an SEC 8-K, state-AG notice, or victim statement lands, DisclosureLens will merge it into an incident and link it here.

Source provenance

Source URL: https://www.ransomware.live/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 25, 2025
Raw hash: 0aec160060e16441c7846f7e5cebd36003f4bbef9f09131db6e2d6f29eccd339

Reporting entity

Name: sarcoma

Victim entity

Name: MACMA Werbeartikel oHG
norm: macma werbeartikel ohg
Domain: macma.de
Industry: Professional Services

What this source establishes

Source ceiling: A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
Attack vector: Ransomware· sarcoma
Threat actor: SarcomaExternalFinancial

Compliance

Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.