get.es listed on LockBit3 leak site following alleged data breach

• Ransomware group: Lockbit3
• Country: Spain
• Sector: Retail & E-Commerce
• Announcement date: July 31, 2022

The LockBit3 ransomware group has listed the Spanish organization get.es on its dedicated leak site, alleging that the company has suffered a data breach. This announcement, which appeared on July 31, 2022, marks a new claim of compromise by the threat actors against the electronics retailer.

Details of the alleged attack

According to the announcement published on the group's platform, LockBit threat actors claim to have successfully compromised data belonging to get.es. The listing was officially posted on July 31, 2022, coinciding with the date the group claims the attack took place. While the presence of the organization on the leak site is a significant indicator of a targeted operation, the specifics regarding the method of entry or the duration of the unauthorized access remain undisclosed by the group.

Ransomware leak sites are a central component of modern cyber extortion strategies. In these scenarios, threat actors often employ double extortion tactics, where they not only encrypt an organization's internal systems to disrupt operations but also exfiltrate sensitive information. By threatening to publish this stolen data on a public platform, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of proprietary or customer information. This method increases the leverage held by the attackers, as the threat of reputational damage and regulatory scrutiny becomes a powerful motivator for the victim organization.

Information regarding the leaked data

Regarding the specific contents of the alleged breach, the group has not provided any detailed description or screenshots to substantiate their claims. The listing does not specify the nature of the data involved, nor does it provide information regarding the volume of files or the total size of the data exfiltrated. Consequently, the listing names no specific data types.

Organization profile

The target of this alleged attack, get.es, is identified as GET (Global Electronic Technology). This organization is a Spain-based electronics retailer and technology product supplier. The company specializes in the sale of various electronic devices and technological equipment, operating primarily within the retail and e-commerce sectors.

Risk assessment and industry implications

This incident may pose secondary risks such as identity theft or targeted phishing attacks for the organization's customers and employees. Although the nature of the data remains unclear, the sector in which the entity operates is particularly sensitive. If the e-commerce entity holds customer information, legal sanctions under GDPR may be observed. The potential exposure of personal identifiers, contact details, or transaction histories often leads to a cascade of secondary cybercrimes targeting the individuals whose data was compromised.

The LockBit group is a Ransomware-as-a-Service (RaaS) operation that has been active since 2019. It is worth noting that the group's infrastructure faced significant disruptions in 2024 due to international operations. Despite such law enforcement actions, RaaS models continue to pose a threat by providing specialized ransomware tools to various affiliates, lowering the barrier to entry for cybercriminals.

For organizations operating within the retail and e-commerce sectors, such incidents highlight the necessity of robust data security processes. To mitigate the impact of such breaches, companies should prioritize comprehensive monitoring of their networks, implement strict access controls, and ensure that all data handling processes are compliant with relevant privacy regulations. Furthermore, notifying relevant authorities regarding potential breaches is a critical step in maintaining transparency and complying with legal frameworks like GDPR.