Lockbit3 ransomware group lists centurion.com.pl on its leak site

• Ransomware group: Lockbit3
• Country: Poland
• Sector: Manufacturing
• Announcement date: October 15, 2022

The Lockbit3 ransomware group has listed the Polish manufacturing company centurion.com.pl on its dedicated leak site. This announcement, made on October 15, 2022, indicates that the group is claiming a data breach involving the organization's infrastructure.

The claimed incident

According to the announcement made by the Lockbit3 group, the organization was targeted in a cyberattack. The group listed centurion.com.pl on their leak platform to publicly announce the incident. This action suggests that an unauthorized intrusion into the organization's network infrastructure may have occurred, allowing the threat actors to gain access to the internal environment.

Ransomware groups often use these leak sites as a tool for double extortion. In such scenarios, attackers not only encrypt a victim's files to disrupt operations but also steal sensitive information to pressure the organization into paying a ransom. By publishing the name of the victim on a public platform, the group increases the visibility of the attack, aiming to maximize the pressure on the target entity.

Details regarding the alleged data breach

While the group has officially claimed a breach, specific details regarding the nature of the allegedly leaked data have not been provided. No information has been released concerning the types of files or the specific categories of information that may have been compromised during the intrusion. Furthermore, there are no screenshots available to substantiate the claims or to provide a preview of the stolen content.

Affected data types

• The listing names no specific data types.

About centurion.com.pl

Centurion is a Polish company specializing in the production of doors and door frames. The organization operates within the manufacturing sector, focusing on the design and manufacturing of interior doors and related accessories.

Potential implications and security considerations

This incident suggests that the organization's sensitive data may have been exposed to unauthorized third parties. If a data breach has indeed occurred, it could lead to significant secondary risks. These risks include identity theft or targeted phishing attacks directed at the organization's employees and customers. Such follow-on attacks often exploit the information harvested during the initial breach to gain further access or to defraud individuals.

Because the organization operates in Poland, the incident may result in legal consequences under the EU General Data Protection Regulation (GDPR). Regulatory frameworks like GDPR require organizations to implement robust security measures and to report breaches to the relevant authorities, making the exposure of sensitive data a matter of legal compliance as well as cybersecurity.

The Lockbit3 group is a known ransomware actor that has been active since 2019. It is worth noting that despite their infrastructure being disrupted by international operations in February 2024, the group may have resumed their operations. This resilience highlights the ongoing challenge posed by sophisticated ransomware groups that adapt to law enforcement interventions.

For organizations in the manufacturing sector, maintaining strong defensive postures is critical. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular network monitoring to detect unauthorized intrusions early. Protecting the integrity of the supply chain and ensuring that sensitive design and production data is encrypted can help mitigate the impact of potential breaches.