Lamberts Business Systems listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: New Zealand
• Sector: Professional Services
• Announcement date: July 9, 2025

Inc Ransom claims data breach at Lamberts Business Systems

The Inc Ransom group has listed Lamberts Business Systems on its dedicated leak site. According to the announcement made on July 9, 2025, the threat actor claims to have obtained data belonging to the New Zealand-based organization. The group has shared file directories that appear to belong to the institution, alongside directories associated with numerous other businesses.

This incident follows the established pattern of modern ransomware operations, where attackers move beyond mere encryption to focus on data exfiltration. By threatening to publish sensitive information on a public leak site, these groups aim to exert maximum pressure on the victim organization to meet their demands. This tactic is commonly referred to as double extortion, where the threat of a data leak is used as a secondary lever alongside the disruption caused by the initial ransomware encryption.

Details of the claimed data exposure

The announcement and accompanying screenshots provided by the group suggest a significant breadth of information has been targeted. The displayed folder structures indicate that the breach may encompass various internal departments, including administration, finance, marketing, production, and sales. Furthermore, the presence of directories linked to various client domains suggests that the scope of the incident may extend to the organization's business partners and customers.

Based on the folder names and directory structures visible in the leak, the following types of information are reportedly involved:

• Financial records
• Personnel data
• Contracts
• Banking information
• Administrative documents

The exposure of such diverse data types can lead to various secondary risks. For instance, the presence of personnel and banking information can facilitate identity theft or highly targeted phishing attacks directed at specific employees or clients. When sensitive corporate documents and contracts are leaked, it can also damage the trust between a service provider and its clientele.

About Lamberts Business Systems

Lamberts Business Systems is a New Zealand-based IT and office equipment provider. The company specializes in computer hardware, network solutions, copiers, and printer systems. Additionally, the organization serves as an authorized service center for major brands such as HP and Canon.

Analysis and potential implications

The Inc Ransom group, which emerged in mid-2023, is known for employing double-extortion tactics. This specific incident highlights the potential for significant exposure of sensitive data belonging to both the institution and its associated businesses. Given the organization's role as a technical service provider, the incident may also increase risks related to supply chain attacks, where a breach at a service provider can serve as a gateway or a source of intelligence for attacking their clients.

Under New Zealand privacy laws, the institution may be required to fulfill specific data breach notification obligations. Organizations facing such incidents often focus on containment, forensic investigation, and assessing the scope of the exfiltrated data to meet regulatory requirements. For companies operating in the professional services and technical support sectors, maintaining robust security posture and monitoring for unauthorized data movement is critical to mitigating the risks of both direct attacks and supply chain vulnerabilities.