Livability listed on Inc Ransom leak site following alleged data breach

• Ransomware group: Inc Ransom
• Country: United Kingdom
• Sector: Professional Services
• Announcement date: November 3, 2023

Inc Ransom claims data breach against Livability

The ransomware group known as Inc Ransom has listed the organization Livability on its dedicated leak site, alleging that the group has successfully executed a data breach against the entity. This announcement, made on November 3, 2023, marks a new instance of targeted cyberattacks against non-profit organizations. While the group has claimed responsibility for the incident, the claims remain unverified by independent third parties.

According to the information published by the threat actor, the group gained unauthorized access to the organization's internal systems. The attackers claim to have exfiltrated various documents during their period of access. To support their claims of a successful intrusion, the group has presented several documents related to the organization's operational activities as proof of the breach.

Details of the alleged data exposure

The evidence provided by Inc Ransom includes screenshots of various files that appear to be part of the organization's internal records. These samples are marked with labels such as "Private & Confidential," suggesting that the documents contain sensitive information intended only for internal use. The leaked materials include a variety of administrative and operational files that could potentially expose the inner workings of the entity.

The specific types of data mentioned in the listing include:

• Corporate agreements
• Financial documents
• Internal correspondence

The group has not provided specific details regarding the total volume of data stolen or the exact number of files compromised. Furthermore, there has been no information provided regarding a specific ransom demand or the total amount of money requested to prevent the further release of the data.

About Livability

Livability is a charity based in the United Kingdom that is dedicated to supporting individuals with disabilities. The organization's primary mission is to enable people with disabilities to live the life they want to lead. To achieve this goal, Livability operates a range of support services and community projects designed to remove social barriers and enhance social inclusion for those they serve.

Implications and risks of the incident

This incident carries significant implications for the organization and the individuals it supports. The exposure of sensitive data can lead to serious risks regarding individual privacy. Because the organization operates within the United Kingdom, it may be subject to strict data protection obligations under the UK GDPR, which governs how personal data must be handled and protected.

The nature of the disclosed documents, which include financial and corporate agreements, could increase the risk of secondary attacks. Such attacks often target an organization's operational processes by using stolen information to conduct more sophisticated social engineering or business email compromise attempts. Furthermore, Inc Ransom appears to be employing the double-extortion method. In this tactic, attackers not only encrypt an organization's data but also threaten to leak it publicly if a ransom is not paid. This method significantly increases the pressure on the victim, as the threat of widespread data dissemination remains even if systems are restored from backups.

Given the sensitive nature of the groups supported by Livability, this breach may have broader implications for social trust and the organization's reputation. For organizations in the professional services and non-profit sectors, maintaining robust cybersecurity postures is critical. Common defensive steps often include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to mitigate the risk of unauthorized access and subsequent data exfiltration.