Lockbit3 claims data breach against asiapacificex.com

• Ransomware group: Lockbit3
• Country: Singapore
• Sector: Transportation
• Announcement date: April 7, 2025

Lockbit3 claims data leak involving asiapacificex.com

The LockBit3 ransomware group has published a listing on its dedicated leak site, claiming that the domain asiapacificex.com has been compromised. According to the announcement made on April 7, 2025, the threat actors allege that they have successfully exfiltrated sensitive information belonging to the organization. While the group has claimed the attack occurred on April 6, 2025, they have not provided specific details regarding the total volume of data stolen or the specific amount of ransom demanded.

Ransomware groups like LockBit3 frequently utilize leak sites to exert pressure on their victims. This process is often part of a strategy known as double extortion. In a double extortion scheme, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data before the encryption phase. The threat actors then threaten to publish this stolen information on public forums or leak sites if the ransom is not paid. This tactic significantly increases the pressure on the victim, as the threat of a public data leak can cause irreparable damage to a company's reputation and legal standing.

Details of the alleged data breach

The threat actors behind the LockBit3 group have provided specific details regarding the nature of the data they claim to have stolen. The announcement suggests that the breach is not limited to a single department but spans various critical areas of the organization's operations. The claims indicate that the stolen information includes sensitive documents belonging to employees, including the CEO, as well as internal corporate communications and financial records. Furthermore, the group has claimed to have accessed Human Resources (HR) data.

The announcement specifically mentions that the alleged stolen data can be accessed via certain cloud storage paths. The specific contents of the leak, as claimed by the group, include:

• Employee documents
• Corporate emails
• Financial records
• HR data

It is important to note that these details are based solely on the claims made by the ransomware group on their leak site. The specific contents and the validity of these claims have not been independently verified.

About Asia Pacific Express (APEX)

Asia Pacific Express (APEX) is a logistics and freight forwarding company that is based in Singapore. The organization provides a variety of essential services to the global supply chain, including international shipping, customs clearance, and comprehensive supply chain management services. Given its role in the transportation sector, the company serves as a critical link in the movement of goods across international borders.

Potential impact and industry implications

The alleged leak of sensitive information poses significant secondary risks to the organization and its stakeholders. For the employees and executives whose documents and emails are reportedly involved, there is an increased risk of identity theft and the possibility of highly targeted phishing attacks. When corporate emails and HR data are exposed, attackers can use the information to craft convincing social engineering campaigns to further penetrate the network or defraud the company and its partners.

Because the organization is based in Singapore, this incident could lead to significant legal and administrative consequences under the Personal Data Protection Act (PDPA). Such regulatory frameworks are designed to ensure that organizations protect the personal data they collect, and breaches can result in heavy penalties and mandatory reporting requirements. Additionally, the breach may negatively impact the organization's operational continuity and commercial reputation. In the logistics and transportation sector, where trust and reliability are paramount, a breach of this nature can compromise supply chain security and damage relationships with clients and partners.

To defend against such threats, organizations in the logistics sector typically focus on strengthening their defensive posture through various security measures. This includes implementing robust multi-factor authentication (MFA), maintaining rigorous patch management schedules, and conducting regular security awareness training for employees to recognize phishing attempts. Furthermore, maintaining offline or immutable backups is a critical component of a resilient recovery strategy, ensuring that an organization can restore its operations even if primary systems are compromised by ransomware.