Lockbit3 claims data breach against pbwtulsa.com

• Ransomware group: Lockbit3
• Country: United States
• Sector: Professional Services
• Announcement date: February 3, 2024

Lockbit3 claims to have stolen data from pbwtulsa.com

The Lockbit3 ransomware group has published an announcement on its dedicated leak site, claiming to have compromised the data of pbwtulsa.com. The group asserts that it has successfully obtained sensitive information belonging to both the organization's employees and its clients. This announcement was posted on the group's leak portal on February 3, 2024, and the group claims the attack itself took place on the same date.

Lockbit is a well-known ransomware group that has been active since 2019. Despite facing significant disruptions to its infrastructure following international law enforcement operations in February 2024, reports indicate that the group has since resumed its operations. The group's use of a leak site is a common tactic in modern cyberattacks, where stolen data is used as leverage to pressure victims into paying ransoms.

Details of the alleged data theft

According to the claims made by the Lockbit3 group, the stolen information is extensive and contains highly sensitive personal and professional records. The group alleges that the breach involves a wide variety of data types that could be used for malicious purposes. The specific items mentioned in the announcement include:

• Employee SSN and EIN
• Passport and ID scans
• Financial documents
• Client databases
• Legal case files

The group's announcement also specifies that the stolen content includes residential addresses, dates of birth, contracts, balance sheets, audits, tax forms, and confidential legal case files and correspondence. No information was provided regarding the total size of the data stolen or the specific ransom demand made by the attackers.

About pbwtulsa.com

PBW (Pray Walker) is a professional services organization operating as a law firm based in Tulsa, Oklahoma. The firm provides a range of legal consulting services across multiple specialized areas, including corporate law, litigation, real estate, and tax law.

Potential impact and security implications

The alleged leak of such sensitive information carries significant risks. For the employees and clients of the organization, the exposure of personal identifiers like Social Security Numbers (SSN), Employer Identification Numbers (EIN), and ID scans significantly increases the risk of identity theft and financial fraud. Furthermore, the exposure of confidential legal case files and client databases could cause substantial damage to the professional reputation of the law firm and may result in legal proceedings stemming from privacy obligations.

Because the organization is based in the United States, the breach may trigger specific notification requirements under relevant state laws and federal data protection regulations. The group's use of double-extortion tactics—where data is both encrypted and stolen—creates a foundation for secondary attacks, such as phishing, once the stolen data is published online.

In such scenarios, organizations typically face the necessity of conducting thorough forensic investigations to determine the true scope of the data compromise. For professional services firms, maintaining rigorous data protection standards and preparing for the legal and reputational consequences of a breach is a critical component of modern cybersecurity management.