Lockbit3 ransomware group lists floortex.com on its leak site

• Ransomware group: Lockbit3
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: November 10, 2023

The LockBit3 ransomware group has listed the United Kingdom-based manufacturing company floortex.com on its dedicated leak site. In the announcement, the threat actor group claims to have successfully compromised the organization and obtained various types of sensitive data belonging to the company.

The alleged data breach event

According to the announcement posted on November 10, 2023, the LockBit3 group alleges that they have gained access to various data sets belonging to floortex.com. The threat actors have initiated a countdown process, a common tactic used by ransomware groups to exert pressure on their victims. This countdown serves as a threat to publish the stolen files publicly if their demands are not met.

The announcement, which was created on the same day as the claimed attack, includes specific details regarding the company's operations. This type of activity is characteristic of double extortion tactics, where attackers not only encrypt an organization's systems to disrupt operations but also threaten to leak sensitive information to damage the company's reputation and force a ransom payment.

Claimed sensitive information

The LockBit3 group has made specific claims regarding the nature of the data they have allegedly acquired. The group asserts that they are in possession of highly sensitive information that could pose significant risks to both the organization and the individuals involved. The data types mentioned in the leak site announcement include:

• Passport data
• Credit card information
• Bank data
• Insurance data
• Employee data

While the group has claimed to hold these specific categories of information, no specific details were provided regarding the total volume of files or the exact size of the data breach. Furthermore, no specific ransom demand has been publicly disclosed in the provided announcement.

About floortex.com

Floortex is a company based in the United Kingdom that specializes in the manufacture and marketing of floor protection products. Since its establishment in 2002, the company has focused on providing a wide range of high-quality floor protection solutions and specialized matting systems to its clients.

Potential impact and security implications

The claims made by the LockBit3 group suggest that both employees and customers of the organization may be exposed to significant risks, including the potential for identity theft due to the nature of the sensitive data mentioned. Because the company is operating within the United Kingdom, such a breach could trigger legal sanctions and mandatory notification obligations under the UK General Data Protection Regulation (UK GDPR).

Based on the historical methods employed by the LockBit group, it is evaluated that the leaked data may be utilized by malicious actors for secondary attacks or highly targeted phishing campaigns. Such campaigns often use stolen information to gain further access to networks or to deceive individuals into revealing even more sensitive credentials.

Beyond the direct risk to personal data, the incident could lead to significant disruptions in the company's operational processes. For companies in the manufacturing sector, such disruptions can have a cascading effect, potentially impacting supply chain security and the reliability of production schedules. To defend against such threats, organizations typically focus on robust backup strategies, multi-factor authentication, and continuous monitoring of network traffic to detect unauthorized access before data exfiltration occurs.