LockBit 3.0 claims data breach against newsupri.com.br

• Ransomware group: LockBit 3.0
• Country: Brazil
• Sector: Technology
• Announcement date: August 23, 2023

The LockBit 3.0 ransomware group has issued a notice on its leak site claiming to have compromised the technology company newsupri.com.br. According to the announcement, the threat actors are demanding a ransom and have threatened to publish all available data if their demands are not met within a specified timeframe.

The details of the claim

The incident was officially announced on August 23, 2023, with the group claiming the attack occurred on the same day. The announcement follows a common pattern used by ransomware-as-a-service (RaaS) groups, where attackers utilize double extortion tactics. In these scenarios, threat actors not only encrypt an organization's systems to disrupt operations but also steal sensitive information to use as leverage, threatening to release it on public leak sites to pressure the victim into paying.

The group's notification serves as a public ultimatum. They have stated that if the deadline is not met, the entirety of the data they claim to have exfiltrated will be released to the public. While the specific ransom amount and the exact volume of data stolen have not been disclosed by the group, the threat of a full data leak remains a central component of their extortion strategy.

Data and evidence provided by the group

The claim is accompanied by evidence intended to prove the breach. Screenshots provided by the attackers show various types of information, including various tables, customer lists, and various data files. Based on the information available, the following data types are reportedly involved in the breach:

• Customer lists
• Data files

The presence of such files on a leak site often indicates that the attackers have gained access to internal databases or file servers containing sensitive organizational and client information.

About newsupri.com.br

Newsupri is a technology company based in Brazil, with a presence in the Northeast region. The organization has over 35 years of experience in its field and specializes in providing IT infrastructure solutions. The company operates with a team of more than 30 highly qualified professionals to serve its client base.

Analysis and potential implications

This alleged leak could significantly impact the operational processes of a company operating within the technology sector. If the stolen data is released, it may lead to the disclosure of trade secrets and a subsequent loss of customer trust. Furthermore, depending on the specific nature of the leaked data, secondary risks such as targeted phishing campaigns or identity theft may occur, as attackers often use stolen information to conduct further social engineering attacks against individuals or other organizations.

Because the company is based in Brazil, this incident may result in legal consequences under local data protection regulations, specifically the LGPD. Organizations operating in highly regulated sectors must remain vigilant, as such breaches can trigger mandatory reporting requirements and significant regulatory scrutiny.

The LockBit group is a well-known RaaS entity that has been monitored by security researchers since 2019. It is worth noting that the group's infrastructure was disrupted by an international law enforcement operation in February 2024, though it has since been reported that the group has resumed its activities. To defend against such threats, organizations typically implement a multi-layered security approach, including regular backups, multi-factor authentication, and continuous monitoring of network traffic to detect unauthorized access or data exfiltration attempts.