inowai.com listed on Lockbit3 ransomware leak site

• Ransomware group: Lockbit3
• Country: Luxembourg
• Sector: Professional Services
• Announcement date: February 18, 2023

The Lockbit3 ransomware group has officially listed the organization inowai.com on its dedicated leak site. According to the announcement made by the threat actor group, the organization's data has been compromised. This listing serves as a public notification from the group regarding their alleged successful intrusion into the company's systems.

Details of the claimed attack

The Lockbit3 group has announced the inclusion of inowai.com in its leak site, claiming that the organization's data has been compromised. According to the group's announcement, this specific action took place on February 18, 2023. The announcement was officially posted to the group's leak site on February 18, 2023.

Ransomware groups often use leak sites to pressure victims into paying ransoms. These sites serve as a public gallery where threat actors post the names of targeted organizations and, in some cases, samples of stolen information. By listing a target, the group aims to damage the victim's reputation and create urgency through public exposure. This tactic is a hallmark of modern ransomware operations, where the threat of data exposure is used as a primary leverage tool.

Data and information status

Regarding the specifics of the breach, there is no screenshot or detailed information available regarding the nature or content of the allegedly leaked data. The listing does not provide any information concerning the volume of files or the specific types of data that have been targeted. Furthermore, there is no information available regarding a ransom demand or the total size of the data involved.

The listing names no specific data types.

In many ransomware incidents, threat actors employ a tactic known as double extortion. In this scenario, the attackers do not just encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information. The threat of releasing this stolen data on a public leak site adds a second layer of pressure on the victim, as the organization faces potential regulatory fines and loss of client trust even if they can restore their systems from backups.

About inowai.com

INOWAI is a Luxembourg-based firm that has been a leader in residential and commercial real estate consulting for over 20 years. The company provides professional services and strategic consulting solutions within the real estate sector.

Security implications and organizational response

This incident suggests that there may be vulnerabilities in the organization's data security processes. Depending on the content of the leaked data, there may be a risk of identity theft or targeted phishing attacks against employees and clients. When sensitive corporate or client information is exposed, it often becomes a commodity for other cybercriminals who use it to conduct more sophisticated social engineering campaigns.

As the organization is based in Luxembourg, a potential data breach could trigger legal processes under the EU General Data Protection Regulation (GDPR). Organizations operating within the European Union must adhere to strict protocols regarding the protection of personal data and the timely notification of authorities and affected individuals in the event of a breach. Failure to comply with these regulations can result in significant legal and financial consequences.

Given the group's history, it is assessed that LockBit may employ double extortion tactics. To address such incidents, organizations typically need to initiate forensic investigations to determine the scope of the leak and notify relevant data protection authorities. Standard defensive measures for organizations in the professional services sector often include implementing robust access controls, maintaining offline backups, and conducting regular security awareness training to mitigate the risk of phishing and other common entry vectors.