cct.or.th listed on Lockbit3 ransomware leak site

• Ransomware group: Lockbit3
• Country: Thailand
• Sector: Professional Services
• Announcement date: January 22, 2024

The Church of Christ in Thailand (cct.or.th) has been listed on the leak site of the LockBit3 ransomware group. The group claims to have compromised data belonging to the organization and has published this information on their dedicated leak site, marking a significant incident for the religious institution.

The alleged ransomware attack

According to the announcement made by the LockBit3 ransomware group, the organization was targeted in a cyberattack. The group claims to have successfully compromised data belonging to cct.or.th and subsequently published this data on their leak site to pressure the victim. The announcement identifies the organization as operating within the religious institutions sector.

The group updated the listing on January 21, 2024, to disclose the incident to the public. This type of activity is characteristic of ransomware groups that utilize double extortion tactics. In such scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release if a ransom is not paid. This method increases the pressure on the victim by leveraging the threat of reputational damage and legal consequences.

LockBit is a ransomware group that has been monitored by security researchers since 2019. Despite an international operation targeting its infrastructure in February 2024, it has been observed that the group continues its operations, maintaining its presence in the cyber threat landscape.

Details regarding the leaked data

Regarding the specific contents of the breach, there is no detailed description regarding the content of the leaked data provided by the attackers. However, the group has made an archive file available for download on their site. The information provided indicates the following details regarding the leaked files:

• The archive file is approximately 6.02 GB in size.

The listing does not provide a specific file count or a detailed breakdown of the individual files contained within the archive. Furthermore, no ransom demand has been specified in the available information.

About the Church of Christ in Thailand

CCT (Church of Christ in Thailand) is a Christian religious organization operating in Thailand. The organization manages a wide range of activities, including the administration of churches, educational institutions, and various social welfare projects across the country.

Implications and organizational risks

This incident, allegedly carried out by the LockBit group, suggests that the security of the organization's digital assets may have been compromised. If the leaked data contains sensitive personal or organizational information, it could lead to risks such as identity theft or targeted phishing attacks for the affected individuals. Such attacks often follow a breach, as criminals use stolen information to craft highly convincing fraudulent communications to deceive victims.

Furthermore, the organization may face legal obligations under Thai data protection regulations, which could result in administrative sanctions. Organizations operating in the professional and religious services sectors must be aware of the regulatory frameworks governing data privacy to avoid such penalties.

To defend against such threats, organizations typically implement various security measures. These include maintaining robust backup systems to ensure data availability, implementing multi-factor authentication to protect access to sensitive systems, and conducting regular security awareness training for employees to recognize phishing attempts. Continuous monitoring of network traffic and the implementation of endpoint detection and response tools are also common defensive steps used to identify and mitigate unauthorized access before data exfiltration can occur.