Equis.com listed on LockBit2 leak site following claims of a data breach

• Ransomware group: Lockbit2
• Country: United States
• Sector: Technology
• Announcement date: June 7, 2022

Equis.com has been listed on the LockBit2 leak site, following claims of a data breach. The threat actor has published an announcement regarding the organization, implying a claim of unauthorized access to the company's systems.

The details of the claim

On June 7, 2022, the LockBit2 group published a leak announcement specifically targeting equis.com. This action by the threat actor involves listing the organization's data on their dedicated platform. Such listings are a common tactic used by ransomware groups to pressure victims into paying ransoms, often through a method known as double extortion. In these scenarios, attackers not only encrypt an organization's data but also threaten to release sensitive information on public leak sites to maximize leverage.

The announcement was made on the same day as the claimed attack date. While the listing serves as a public claim of a successful intrusion, it is important to note that the presence of an organization on a leak site represents the group's claim of a breach.

Data involved in the incident

Regarding the specific content of the alleged breach, there is no information or screenshot available regarding the nature of the data shared on the leak site. The listing names no specific data types or categories of information that were purportedly stolen or accessed.

Potential risks of data exposure

When a data breach is claimed, several secondary risks emerge for the affected entity and its stakeholders. If the alleged leaked data contains personal or corporate information, it could trigger notification obligations under relevant regulations. Furthermore, the exposure of such information can lead to significant secondary risks, including the use of the data for identity theft or targeted phishing attacks against the organization or its clients.

About equis.com

Equis is a technology company focused on election data, political analysis, and voter management. It provides data analytics and strategic software solutions for political campaigns and organizations.

Analysis and organizational implications

This incident suggests that the organization's digital assets may be at risk of unauthorized access. The nature of the organization's work—handling election data, political analysis, and voter management—means that the integrity and confidentiality of their data are of paramount importance to their operations and the political entities they serve.

The LockBit group is a Ransomware-as-a-Service (RaaS) entity observed since 2019, which remained active until international operations in 2024. RaaS models allow developers to lease their ransomware code to affiliates, who then carry out the actual attacks, often using the group's infrastructure to host leak sites and manage ransom negotiations.

For organizations operating in the technology and data analytics sectors, this event underscores the necessity of robust cybersecurity postures. It may be advisable for organizations to review their data security protocols and implement necessary measures against potential data breaches. Common defensive steps for organizations facing such threats include implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits to identify vulnerabilities before they can be exploited by threat actors.