Lockbit3 ransomware group lists avescorent.ch on its leak site

• Ransomware group: Lockbit3
• Country: Switzerland
• Sector: Professional Services
• Announcement date: December 23, 2023

Lockbit3 claims data breach at Avesco Rent

The Lockbit3 ransomware group has officially listed the Swiss-based organization avescorent.ch on its dedicated leak site. Through this announcement, the threat actor group claims that various sensitive documents belonging to the company will be published if their demands are not met. This move is a characteristic example of the double extortion tactics frequently employed by modern ransomware groups, where attackers not only encrypt an organization's internal systems but also threaten to release stolen data to maximize pressure on the victim.

According to the announcement made on December 23, 2023, the group has initiated a countdown timer, a common psychological tactic used by ransomware operators to create a sense of urgency and panic. The listing includes a brief description of the organization's business operations alongside samples of documents that the group claims to have successfully compromised during their intrusion.

Details of the claimed data theft

While the total volume of stolen data and the specific ransom amount have not been disclosed by the attackers, the group has provided visual evidence to support their claims. The screenshots provided by the attackers allegedly display a variety of sensitive information that could have significant implications for the privacy of individuals and the operational integrity of the company.

The types of data identified in the leaked samples include:

• Passport data
• Contract texts
• Financial documents
• Accounting records

The presence of such diverse data types—ranging from personal identification to sensitive corporate financial records—highlights the potential breadth of the breach. In many ransomware scenarios, attackers target these specific categories to increase their leverage during negotiations, knowing that the exposure of identity documents and financial statements can lead to severe regulatory and reputational consequences.

About Avesco Rent

Avesco Rent is a professional services company based in Switzerland. The firm specializes in providing machinery and equipment rental services across several critical sectors, including construction, industry, events, and landscaping. Having operated for over 30 years, the organization is established as a provider of professional solutions through a wide range of specialized equipment.

Potential impact and organizational risks

The claims made by Lockbit3 present several significant risks to the organization and its stakeholders. For the employees and customers of Avesco Rent, the exposure of personal documents like passports significantly increases the risk of identity theft and various forms of fraud. When personal identification information is leaked, it can be exploited by malicious actors to impersonate individuals in financial or legal contexts.

Furthermore, because the organization is based in Switzerland, a successful data leak could trigger complex legal processes under the Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR). These frameworks impose strict requirements on how organizations must protect personal data and how they must respond when a breach occurs. The potential for legal scrutiny and regulatory fines is a major concern for companies operating within these jurisdictions.

From a business perspective, the publication of data by the Lockbit group could cause lasting damage to the institution's commercial reputation. In the professional services and rental sectors, trust is a fundamental component of client relationships. A breach of this nature can lead to a loss of confidence among partners and clients, potentially triggering supply chain risks where the company's partners may also be affected by the security lapse. To mitigate such risks, organizations typically find it necessary to investigate the exact accuracy and scope of the compromised data and to fulfill their obligations by informing the relevant data protection authorities.

General defensive considerations

In the face of such threats, organizations often focus on strengthening their security posture through multi-factor authentication, regular data backups, and continuous monitoring of their networks. Understanding the methods used by groups like Lockbit3 is essential for developing robust incident response plans that can address both the technical recovery of systems and the legal complexities of data privacy compliance.