Threat actors have allegedly breached a WA-based trade supplier, claiming to have exfiltrated personal and company data.