Lockbit3 ransomware group lists agencavisystems.com on its leak site

• Ransomware group: Lockbit3
• Country: Italy
• Sector: Technology
• Announcement date: May 9, 2024

LockBit3 claims data breach against Agencavi Systems

The LockBit3 ransomware group has listed Agencavi Systems, an Italian provider of industrial connection solutions, on its dedicated leak site. The group announced the publication of data it claims belongs to the organization on May 9, 2024. This development follows an earlier claimed attack date of February 12, 2024, suggesting the threat actors may have maintained access to the environment for several months prior to the public announcement.

LockBit3 is a well-known ransomware group that has been active since 2019. The group has previously been the target of significant international law enforcement efforts aimed at disrupting its infrastructure, specifically in February 2024. Despite those efforts, the group has reportedly resumed its operations, continuing to target various organizations globally.

Details of the claimed data leak

While the group has officially listed the organization on its leak site, specific details regarding the total volume of data stolen or the exact number of files involved remain unknown. There is no information available regarding the total size of the data or the specific ransom demand made by the attackers.

Based on the evidence provided by the group, such as screenshots of file directories, the leaked content appears to include various technical and administrative files. The directories shown contain several Excel spreadsheets and technical image files. The specific scope and the full content of the leaked data have not been detailed by the attackers. The listing identifies the following types of affected information:

• Customer lists
• Technical documents
• Project files

About Agencavi Systems

Agencavi Systems is an organization based in Italy that specializes in the field of industrial connection solutions. The company is involved in both the supply and manufacture of various types of industrial equipment. Their product portfolio includes essential components such as wiring, connectors, control panels, and junction boxes, which are critical for industrial operations.

Potential risks and industry implications

The claim made by LockBit3 poses significant risks to the organization's operational integrity and the security of its customer information. Because Agencavi Systems is based in Italy, a confirmed breach of this nature could trigger legal sanctions and mandate specific notification obligations under the General Data Protection Regulation (GDPR).

The exposure of technical documents and project files may result in the disclosure of trade secrets, potentially undermining the company's competitive advantage. Furthermore, the leaked data could facilitate secondary cyberattacks, such as highly targeted phishing campaigns directed at the organization's customers or business partners. Such attacks often leverage the stolen information to gain trust and deploy further malware.

LockBit3 is known for employing double-extortion tactics. In these scenarios, attackers not only encrypt an organization's systems but also steal sensitive data, threatening to leak it publicly unless a ransom is paid. This method increases the pressure on organizations, as the threat of data exposure can lead to severe reputational damage and create vulnerabilities within the broader supply chain. Organizations operating in the industrial technology sector often face these risks, making robust data protection and incident response plans essential to mitigate the impact of such sophisticated threats.