Businesscentral.org.nz listed on Lockbit3 leak site

• Ransomware group: Lockbit3
• Country: New Zealand
• Sector: Professional Services
• Announcement date: December 19, 2022

LockBit3 claims data breach at businesscentral.org.nz

The LockBit ransomware group has announced the listing of businesscentral.org.nz on its dedicated leak site. This announcement, made on December 19, 2022, indicates a potential security incident involving the New Zealand-based organization.

The group claims to have successfully executed a cyberattack against the organization. According to the claims made by the threat actor, the group gained unauthorized access to the network of businesscentral.org.nz and subsequently exfiltrated data. This claim was communicated directly through the group's own leak platform, a common tactic used by ransomware operators to pressure victims.

Details of the alleged incident

The claims made by the LockBit group regarding the breach of businesscentral.org.nz involve unauthorized network access and data exfiltration. The group alleges that the incident occurred on December 19, 2022. However, the specific nature and the overall scope of the allegedly leaked data have not been disclosed by the attackers. Furthermore, no screenshots or specific evidence have been provided to substantiate the claims at this time.

Regarding the specific types of information involved in the alleged leak, the listing names no data types.

The organization profile

Business Central is an organization based in New Zealand that provides professional services to businesses. Its service portfolio includes employment advice, staff development, recruitment support, and mentoring. The organization functions as a support network specifically focused on helping businesses grow and developing their people.

Risk assessment and industry implications

The claims made by the LockBit group may pose significant risks to the organization's operational continuity and data privacy. Depending on the actual content of the leaked data, secondary risks could emerge, such as identity theft or targeted phishing attacks directed at employees and members of the organization.

Under New Zealand privacy laws, the organization may be required to fulfill specific data breach notification obligations. Such regulations are designed to ensure that affected parties are informed when their personal information is compromised.

LockBit is recognized as a Ransomware-as-a-Service (RaaS) group that has been active since 2019. While the group's infrastructure has previously been disrupted by international operations, this history suggests that the group's tactics and methods could be subject to change. Such groups often utilize double extortion tactics, where data is not only encrypted but also stolen to increase leverage during ransom negotiations.

For organizations operating within the professional services sector, maintaining robust security posture is critical. Common defensive steps for organizations facing such threats include implementing multi-factor authentication, maintaining offline backups, and conducting regular network monitoring to detect unauthorized access. Ensuring compliance with regional privacy laws is also a vital component of managing the fallout from potential data breaches.