Concorr.com listed on Lockbit3 leak site

• Ransomware group: Lockbit3
• Country: United States
• Sector: Professional Services
• Announcement date: May 1, 2024

LockBit claims concorr.com as a target

The LockBit ransomware group has announced the listing of concorr.com on their leak site. According to the threat actors, the organization has been added to their target list via a post on their dedicated leak platform. This announcement was officially created on May 1, 2024, and the group claims the attack occurred on the same date.

Ransomware leak sites are platforms used by cybercriminal groups to exert pressure on victims. These sites often serve as a public gallery for stolen data, used in a tactic known as double extortion. In such scenarios, attackers do not only encrypt an organization's internal systems but also steal sensitive information, threatening to publish it online unless a ransom is paid. This dual approach increases the pressure on the victim, as the threat of a public data leak can lead to significant reputational damage and regulatory scrutiny.

The current listing by LockBit3 remains a claim made by the threat actors. At this stage, the provided documentation does not include a confirmation of the breach from the organization itself.

Details regarding the alleged data breach

Regarding the specific content of the alleged leak, there is currently no information available concerning the nature of the data that has been taken. The technical details provided by the threat actors are notably limited. The screenshot provided as evidence of the attack does not display specific leak details or sensitive files; instead, it contains only a technical error page, specifically a network error page.

The listing names no specific data types that have been compromised.

About concorr.com

CONCORR, Inc. is an engineering firm that specializes in the development of technologies and solutions designed to mitigate reinforcement corrosion in reinforced concrete structures. Established in 1990, the company focuses on the diagnostic evaluation and corrosion management of various concrete structures.

Risk assessment and industry implications

LockBit is a prominent ransomware group that has been tracked since 2019. Despite facing significant international law enforcement disruptions in February 2024, the group has reportedly resumed its operations. The claim of a data breach against an entity like CONCORR, Inc. may pose secondary risks to both employees and clients. These risks often include identity theft or the execution of targeted phishing campaigns using the stolen information.

Because the organization is based in the United States, a potential data breach could trigger various state-level data protection regulations and specific notification requirements. Organizations operating in the professional services sector must remain vigilant against such threats. Common defensive steps for organizations include maintaining robust backup solutions, implementing multi-factor authentication, and conducting regular security awareness training to prevent initial access by threat actors.

Given the known tactics of the LockBit group, the publication of data or the application of pressure through ransom demands may be expected following such an announcement. Organizations facing these threats typically focus on incident response plans and ensuring that their regulatory compliance measures are ready to address potential data exposure.