LockBit3 ransomware group lists globalcommunities.org on its leak site

• Ransomware group: LockBit3
• Country: United States
• Sector: Government & Defense
• Announcement date: February 28, 2023

The non-profit organization Global Communities has been listed on the leak site of the LockBit3 ransomware group. This listing, which appeared on February 28, 2023, constitutes a claim by the threat actors that they have successfully targeted the organization and obtained its data.

The claims made by LockBit3

According to the announcement posted on the group's leak site, the LockBit3 ransomware group claims to have obtained data belonging to globalcommunities.org. The group has threatened to publish the organization's data if their demands are not met. This type of threat is a hallmark of modern ransomware operations, often referred to as double extortion, where attackers not only encrypt an organization's systems but also threaten to release sensitive information to pressure the victim into paying a ransom.

The listing was officially added to the group's leak site on February 28, 2023. While the group has asserted that they have successfully breached the organization, the specific details regarding the timing and nature of the intrusion remain limited to the group's own claims.

Details regarding the alleged data breach

At this time, there is no information regarding the nature of the leaked or threatened data. The group has not provided any screenshots to substantiate their claims or to demonstrate the contents of the files they allege to possess. Furthermore, there is no information available concerning the specific volume of data involved or the total number of files that may have been compromised during the alleged attack.

• The listing names no specific data types.

About Global Communities

Global Communities is a non-profit organization that was founded in 1952. The organization operates in over 35 countries, focusing on sustainable development initiatives. Their work includes providing affordable housing solutions for low-income families and supporting various development projects across their areas of operation.

Potential implications and risk assessment

This situation may result in the exposure of the organization's sensitive data. A data breach of this nature could impact the organization's operational processes and lead to significant reputational damage. If the data includes personal or corporate information, it could potentially be used for secondary attacks or targeted phishing attempts against the organization or its stakeholders.

LockBit is a Ransomware-as-a-Service (RaaS) group that has been monitored by security researchers since 2019. It is reported that the group has resumed operations despite an international operation targeting their infrastructure in February 2024. The resilience of such groups poses a continuous threat to various sectors globally.

Considering the sector in which the organization operates, the breach may lead to legal consequences under international regulations. Organizations operating in the international development and non-profit sectors must navigate complex regulatory landscapes regarding data protection. To mitigate such risks, organizations typically focus on strengthening their security posture through various defensive measures, such as implementing robust access controls, maintaining regular backups, and conducting employee training to recognize phishing attempts. However, the specific impact on Global Communities remains to be determined as the situation evolves.