Belize Electricity Limited listed on Ragnar Locker leak site

• Ransomware group: Ragnar Locker
• Country: Belize
• Sector: Energy & Utilities
• Announcement date: July 10, 2023

Ragnar Locker claims data leak involving Belize Electricity Limited

The Ragnar Locker ransomware group has listed Belize Electricity Limited on its leak site, claiming a significant data breach. According to the announcement made on July 10, 2023, the threat actors claim to have exfiltrated 350 GB of data allegedly belonging to the organization. This development follows a pattern of double extortion, where attackers not only encrypt an organization's systems but also steal sensitive information to use as leverage during ransom negotiations.

The threat actors stated that their decision to publish the data was driven by unsuccessful attempts to engage with the management of Belize Electricity Limited. The group cited the organization's alleged failure to secure user data as the primary motivation for releasing the information publicly. While the group has made these claims, the specific details regarding the ransom demand or the exact nature of the initial intrusion remain unknown.

Details of the claimed data exfiltration

The information released by the Ragnar Locker group reportedly includes a wide variety of sensitive documents and personal records. Based on screenshots provided by the attackers, the leaked content is highly diverse, ranging from administrative records to deeply personal identification documents. The scope of the data suggests a significant impact on both the internal operations of the company and the privacy of its stakeholders.

The content allegedly includes the following types of information:

• Accident reports
• Account balances
• Customer personal information
• Confidential letters
• Conflict of interest disclosures
• Emails
• Driver's license scans
• Land transfer documents
• Non-disclosure agreements
• Employee HR data
• Social security card copies
• Service contracts

The specific categories of affected data identified in the leak include:

• Employee HR data
• Customer personal information
• Social security numbers
• Financial documents
• Legal contracts

About Belize Electricity Limited

Belize Electricity Limited serves as the primary electricity transmission and distribution company in Belize. The organization holds a critical role in the country's infrastructure, as it is responsible for the supply, transmission, and distribution of electrical energy throughout the nation.

Potential impact and security implications

The exposure of such sensitive information carries significant risks for both the organization and the individuals involved. For employees and customers, the leak of social security numbers, driver's license scans, and financial documents significantly increases the risk of identity theft and various forms of fraud. For the organization itself, the breach may result in negative impacts regarding its operational security and its overall reputation within the region.

Furthermore, the organization may face legal scrutiny under the existing data protection regulations in Belize. The methodology employed by the Ragnar Locker group—specifically the exfiltration of data prior to encryption—suggests that the organization could face secondary extortion attempts. This tactic is a hallmark of modern ransomware operations, where the threat of a public data leak is used to pressure victims even if they can recover their systems from backups.

In the energy and utilities sector, maintaining robust cybersecurity posture is essential due to the critical nature of the services provided. Organizations in this sector typically focus on securing industrial control systems, implementing strict access controls, and conducting regular audits to mitigate the risk of unauthorized data exfiltration. As public information regarding the Ragnar Locker group remains limited, organizations are advised to remain vigilant against evolving extortion tactics.