Lockbit3 claims data breach against divaris.com

• Ransomware group: Lockbit3
• Country: United States
• Sector: Professional Services
• Announcement date: August 11, 2024

LockBit3 claims data breach against divaris.com

The LockBit3 ransomware group has listed divaris.com on its leak site, alleging that a data breach has occurred. This announcement, which marks a new target for the threat actor, was observed on the group's platform on August 11, 2024.

Details of the alleged attack

According to the announcement made by the LockBit3 ransomware group, the organization's systems have been breached. The group's listing of divaris.com on its leak site serves as a public claim of their successful intrusion into the company's infrastructure. While the group has claimed to have accessed the systems, the specific timeline of the initial breach is cited as June 1, 2024.

Ransomware groups often use leak sites to pressure victims into paying ransoms by threatening to release sensitive information. This tactic is a central component of modern cyber extortion. In many cases, these groups target specific organizations to maximize the impact of their demands, using the threat of public exposure as leverage against the victim's reputation and operational stability.

Information regarding the leaked data

At this stage, no details regarding the nature of the allegedly leaked data have been provided by the threat actor. The listing does not specify what types of files were accessed or if any specific databases were compromised. The only visual information available is a screenshot displaying a verification page used to access the leak site.

The listing names no data types.

About divaris.com

Divaris Real Estate is an American company providing commercial real estate management, leasing, investment sales, and development services. The company specializes in retail, office, and industrial properties.

Threat assessment and organizational implications

LockBit is a ransomware group active since 2019, known for its Ransomware-as-a-Service (RaaS) model. Despite an international operation targeting its infrastructure in February 2024, the group has reportedly resumed its activities. This resurgence highlights the persistent threat posed by organized cybercrime groups that continue to evolve despite law enforcement interventions.

Given that the organization is based in the United States, a potential data breach may trigger state-level data protection laws and relevant regulations. Organizations operating in the professional services sector must be prepared to navigate complex legal landscapes following a security incident. Compliance with these regulations is critical to managing legal liability and maintaining trust with stakeholders.

Until the contents of the leaked data are clarified, it is assessed that secondary risks such as identity theft or targeted phishing attacks against the organization's employees and customers may arise. These secondary attacks often follow a primary breach, as stolen information is used to conduct more sophisticated social engineering campaigns.

Considering the group's past tactics, it is anticipated that the threat of data publication via double extortion strategies may persist. Double extortion involves both encrypting the victim's data and stealing it, with the threat actor demanding payment to prevent the public release of the stolen information. To mitigate such risks, organizations typically focus on robust backup strategies, network segmentation, and continuous monitoring of their digital perimeter to detect unauthorized access before data exfiltration can occur.