Lockbit3 ransomware group lists evit.edu on its leak site
The LockBit ransomware group claims to have leaked data belonging to the East Valley Institute of Technology (evit.edu).
- Published
- 2 min read
- 2 min read
- Ransomware group: Lockbit3
- Country: United States
- Sector: Education
- Announcement date: January 19, 2024
The Lockbit3 ransomware group has claimed responsibility for a data breach targeting the East Valley Institute of Technology (evit.edu). According to an announcement made on the group's leak site, the threat actor group asserts that they have obtained access to the institution's network.
The details of the claim
On January 19, 2024, the Lockbit3 group listed the institution on its dedicated leak site. This announcement serves as a formal claim that the group has successfully gained unauthorized access to the organization's internal systems. Following the initial listing, the group initiated a countdown timer, a common tactic used by ransomware operators to pressure victims into meeting specific demands before the promised publication of stolen information.
Ransomware leak sites function as a platform for cybercriminals to host stolen data and publicize their attacks. This method is often used as part of a double extortion strategy. In such scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information. The threat of leaking this data publicly serves as a secondary layer of leverage, forcing the victim to choose between paying a ransom to prevent the leak or facing the reputational and legal fallout of a public data exposure.
Information regarding the alleged data leak
While the group has officially claimed the breach, there is currently no detailed information regarding the specific type or the overall scope of the data that has allegedly been leaked. The records provided by the group do not specify the nature of the files or the volume of the information involved. Consequently, the listing names no specific data types at this time.
About the East Valley Institute of Technology
The East Valley Institute of Technology (EVIT) is a public vocational-technical school district situated in Mesa, Arizona. The institution serves a diverse community by providing various technical and career-oriented programs designed for both high school students and adults seeking specialized training.
Potential impact and sector implications
Given that the institution operates within the education sector, the verification of these claims could pose a significant risk of exposing sensitive student and staff data. Such an event could lead to various legal consequences under the specific regulations in the United States that are designed to protect educational data. If the claims are validated, the individuals whose information was targeted may face increased risks of identity theft and may become targets for highly specific, targeted phishing attacks.
The activities of the Lockbit group suggest that the publication of stolen data is frequently utilized as a secondary extortion method to maximize pressure on the target. Furthermore, the presence of security vulnerabilities within an institution's systems can have broader implications, potentially impacting the security of the entire supply chain. To defend against such threats, organizations in this sector typically focus on strengthening their network perimeter, implementing robust access controls, and maintaining rigorous monitoring of their digital environments to detect unauthorized access before data exfiltration can occur.