Lockbit3 claims data breach against onyourmark.org

• Ransomware group: Lockbit3
• Country: United States
• Sector: Healthcare
• Announcement date: November 20, 2023

LockBit3 targets healthcare organization onyourmark.org

The LockBit3 ransomware group has listed onyourmark.org, an organization operating within the healthcare sector, on its official leak site. This announcement, made on November 20, 2023, marks a claimed data breach targeting the Staten Island-based entity. By appearing on the group's leak site, the threat actor has signaled its intent to compromise the organization's digital assets and potentially expose sensitive information.

Details of the claimed attack

According to the announcement posted by the LockBit3 group, the organization was targeted on November 20, 2023. Upon listing the organization, the group initiated a countdown process, a common tactic used by ransomware operators to pressure victims. This countdown indicates that the group intends to publish the organization's data if certain conditions are not met. The announcement provided by the group included general information regarding the services provided by the organization, but it did not provide specific technical details regarding the method of entry or the scope of the intrusion.

Ransomware groups often utilize leak sites as a tool for double extortion. In this model, attackers do not only encrypt an organization's files to disrupt operations but also steal sensitive data to threaten its public release. This tactic is designed to maximize leverage during ransom negotiations by threatening the organization's reputation and legal standing. The use of a countdown timer is a psychological component of this strategy, intended to create a sense of urgency and panic within the victim organization.

Data involved in the breach

Regarding the specific content of the breach, the listing does not provide information regarding the nature of the leaked or threatened data. There is no information available concerning the specific file types, the volume of data stolen, or the exact number of files involved in the incident.

About onyourmark.org

On Your Mark is an organization that provides innovative and comprehensive community-based services to individuals with intellectual and developmental disabilities throughout their lifespan. Based in Staten Island, the organization is dedicated to improving the quality of life for individuals with disabilities and supporting their integration into the community.

Risk assessment and sector implications

Given that the organization operates in the healthcare sector, a potential data breach could lead to the exposure of sensitive personal information. The nature of healthcare services means that organizations in this field often handle highly confidential data. If such data is indeed compromised, it could increase the risk of individuals being subjected to identity theft or targeted phishing attacks. Furthermore, potential violations of regulations concerning the privacy of health data could arise from such an incident.

The LockBit group is a Ransomware-as-a-Service (RaaS) group that has been tracked since 2019. It is notable that the group resumed operations following an international operation in February 2024, suggesting that their methods and persistence may pose secondary risks to various sectors. The resilience of such groups highlights the ongoing necessity for robust cybersecurity frameworks.

For organizations operating in the healthcare sector, maintaining strong defensive postures is critical. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for staff. Additionally, monitoring for unauthorized access and ensuring strict adherence to data privacy regulations can help mitigate the impact of potential breaches. As ransomware groups continue to evolve, organizations must remain vigilant against the sophisticated methods employed by RaaS operators.