Lockbit3 claims data breach against mercuryit.co.nz

• Ransomware group: Lockbit3
• Country: New Zealand
• Sector: Technology
• Announcement date: December 19, 2022

Lockbit3 claims a data breach at mercuryit.co.nz

The Lockbit3 ransomware group has announced that it has successfully compromised data belonging to the technology company mercuryit.co.nz. This announcement, made on a ransomware leak site, suggests a significant security failure within the target organization's infrastructure.

Details of the alleged attack

According to the claims made by the Lockbit3 group, the cyberattack against mercuryit.co.nz was carried out on December 19, 2022. The group alleges that they were able to breach the company's networks and subsequently encrypted over 500 TB of customer data. The announcement specifically claims that the company failed to protect both its own internal data and the sensitive information belonging to its clients.

Ransomware attacks of this nature often involve a technique known as double extortion. In such scenarios, threat actors do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. The goal is to pressure the victim into paying a ransom by threatening to leak the stolen information on public leak sites, which can lead to severe reputational damage and regulatory scrutiny.

Information regarding the leaked data

Regarding the specifics of the breach, there is no detailed information available concerning the exact nature of the leaked data. The group has not provided any screenshots or specific file lists to substantiate the claims of the breach.

About mercuryit.co.nz

Mercury IT is a technology company that provides a range of professional services, including managed IT services, cloud solutions, and cybersecurity support. The company serves a client base located across New Zealand and Australia.

Risk assessment and industry implications

This incident may pose significant data privacy risks for the clients of mercuryit.co.nz. Depending on the nature of the allegedly leaked data, individuals may face potential risks of identity theft or targeted phishing attacks. Furthermore, under New Zealand's privacy laws, the company may be subject to data breach notification obligations.

The impact of such a breach can extend beyond the immediate victim. Because mercuryit.co.nz provides managed services, the impact on the company's supply chain may create secondary risks for the other businesses it serves. When a service provider is compromised, their clients often face increased exposure to risk, as the attacker may have gained a foothold into multiple downstream environments.

Lockbit3 is recognized as a Ransomware-as-a-Service (RaaS) operation. This model allows developers to lease their ransomware code to affiliates who then carry out the actual attacks. This group has been active since 2019 and has reportedly resumed operations following international disruptions to its infrastructure.

To defend against such threats, organizations in the technology and managed services sector often implement various defensive measures. These include maintaining robust backup solutions, implementing multi-factor authentication across all access points, and conducting regular network monitoring to detect unauthorized lateral movement. Strengthening supply chain security and ensuring strict adherence to regional privacy regulations are also critical components of a modern cybersecurity posture.