Interfashion.it listed on LockBit ransomware leak site

• Ransomware group: Lockbit3
• Country: Italy
• Sector: Professional Services
• Announcement date: May 9, 2024

LockBit claims attack on Interfashion.it

The LockBit ransomware group has listed the Italian entity interfashion.it on its leak platform. According to the announcement made by the group, the organization was targeted in a cyberattack that allegedly took place on March 24, 2024. The group officially added the company to its public leak site on May 9, 2024, which marks the initiation of a formal ransom process by the threat actors.

Ransomware groups often utilize leak sites as a method of double extortion. In these scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also threaten to publish sensitive information on public forums if a ransom is not paid. This tactic is designed to exert maximum pressure on the victim by threatening their reputation and legal standing. While the group has listed the company, the specific details regarding the nature of the alleged breach remain limited to the claims made on the platform.

Data involved in the alleged breach

Regarding the specific information that may have been compromised, the current records provide very limited details. The listing does not specify the volume of data involved or the total number of files taken. Furthermore, there is no information regarding the nature of the allegedly leaked data in the provided record or the screenshot. The listing names no specific data types.

About Interfashion.it

Interfashion.it is an Italian company that specializes in the design, production, and distribution of fashion products. Established in 1992, the firm has a long history in the industry and has historically been responsible for producing brands such as Marithè+François Girbaud and GGigli. In 2023, the company underwent a change in ownership when it was acquired by STRAVA S.r.l.

Analysis and potential impact

The alleged leak poses several significant risks to the organization. From an operational standpoint, such an event may create negative impacts on the company's operational continuity. Because Interfashion.it is an Italy-based company, any potential data breaches may lead to legal sanctions under the EU General Data Protection Regulation (GDPR). Compliance with these regulations is critical for organizations operating within the European Union to avoid substantial penalties.

Furthermore, based on the historical activities of the LockBit group, it is assessed that the leaked data could pose risks such as secondary attacks or identity theft. There is also an increased risk of targeted phishing attacks directed at the organization's supply chain partners and customers. These types of attacks often leverage stolen information to gain trust and exploit other entities within the business ecosystem.

The LockBit group is a Ransomware-as-a-Service (RaaS) model that has been tracked since 2019. While the group experienced significant infrastructure disruption in February 2024 due to an international law enforcement operation, it has been reported to have resumed its activities. This resilience highlights the ongoing threat posed by such groups to professional services and manufacturing sectors globally.

To mitigate these risks, organizations in similar sectors often implement defensive measures such as multi-factor authentication, regular offline backups, and continuous monitoring of network traffic. Strengthening supply chain security and conducting regular employee training on phishing awareness are also vital steps in maintaining a robust cybersecurity posture against evolving ransomware threats.