Lockbit3 ransomware group lists flexity.com on its leak site

• Ransomware group: Lockbit3
• Country: United States
• Sector: Healthcare
• Announcement date: July 18, 2023

LockBit3 claims data breach at Flexity

The LockBit3 ransomware group has officially listed the United States-based organization flexity.com on its dedicated leak site. According to the announcement made on July 18, 2023, the threat actor group claims to have successfully compromised the institution's data and has declared their intention to publish the stolen information.

The group's announcement included visual evidence in the form of screenshots to support their claims. These images provided a glimpse into the types of information the group asserts they have accessed within the organization's systems. This method is a common tactic used by ransomware groups to pressure victims by demonstrating that they have indeed gained access to sensitive internal files.

Details of the claimed data exposure

While the specific volume of the data and the exact ransom demand remain unknown, the visual samples provided by the attackers offer insight into the nature of the files they claim to possess. The screenshots shared by the group appear to display various file lists that are directly related to the institution's internal operations and service delivery models.

Based on the information provided in the leak site announcement, the affected data categories include:

• Financial records
• Business process documents
• Onboarding data

The presence of such documents suggests that the breach may involve sensitive information regarding the company's service proposals, billing details, and various onboarding procedures essential to their business operations.

About Flexity

Flexity is a consulting and technology company that operates within the healthcare technology sector. The organization specializes in clinical process transformation, workflow optimization, and the development of health technology solutions. Their primary mission involves providing healthcare IT services that are specifically designed to improve the quality of service and enhance access to care for various healthcare organizations.

Potential risks and industry implications

The claim made by LockBit3 poses significant risks due to the sensitive nature of the data handled by an organization like Flexity. Given the company's role in the healthcare sector, the exposure of clinical and operational data could lead to severe consequences. The publication of such information may trigger secondary risks, such as identity theft or targeted phishing attacks, which could impact the healthcare organizations and the patients served by the institution.

Furthermore, the potential leak of health-related data may trigger legal processes in accordance with local and international data protection regulations that the institution is required to follow. Such incidents often necessitate a rigorous response to manage legal liabilities and ensure compliance with privacy standards.

The LockBit group is identified as a Ransomware-as-a-Service (RaaS) structure that has been observed since 2019. Despite international interventions reported in February 2024, the group has reportedly continued its operations. This persistent threat model can have a negative impact on an institution's operational continuity and its overall reputation management.

In the broader context of cybersecurity, ransomware groups often employ double extortion tactics, where they not only encrypt data to disrupt operations but also threaten to leak sensitive information to maximize leverage. To defend against such threats, organizations in the healthcare technology sector typically focus on robust data encryption, strict access controls, and continuous monitoring of their IT infrastructure to detect unauthorized access early.