LockBit3 ransomware group lists pradiergranulats.fr on its leak site

• Ransomware group: LockBit3
• Country: France
• Sector: Professional Services
• Announcement date: February 15, 2024

LockBit3 claims data breach against Pradier Granulats

The LockBit3 ransomware group has officially listed the French organization Pradier Granulats on its dedicated leak site. In the announcement, which was posted on February 15, 2024, the threat actor group claimed to have successfully breached the entity. According to the group's claims, the organization's files are scheduled for publication on their platform, a common tactic used in double extortion ransomware campaigns to pressure victims into paying a ransom.

To provide evidence for their claims, the LockBit3 group has shared a screenshot that displays the organization's internal directory structure. This visual evidence is intended to demonstrate that the attackers have gained access to the company's file systems. While the group has made these claims, it is important to note that the breach remains an allegation made by the threat actor.

Potential data types involved in the alleged breach

The directory structure revealed in the screenshot provided by the attackers suggests that various types of sensitive information may be at risk. Based on the visible file paths and folders, the data potentially compromised includes several categories of internal and external information. The specific types of data identified in the directory structure include:

• Quality audit reports
• Social audit records
• Commercial data
• Customer information

The presence of such directories suggests that unauthorized access may have extended into critical business processes and sensitive client-facing information. No specific data size or file count has been provided by the group, and there is no information regarding a specific ransom demand or the exact date the initial intrusion occurred, beyond the date of the announcement itself.

About Pradier Granulats

Pradier Granulats is a French company that operates within the professional services sector. The organization specializes in the extraction, production, and packaging of aggregates, which are essential materials for the construction and landscaping industries. The company maintains a significant operational scale, supplying products in various formats including bagged, big-bag, and bulk options, with an annual capacity of 700,000 tons.

Risks and industry implications

This alleged data breach poses significant risks to the organization, particularly regarding its operational continuity and its commercial reputation. The exposure of internal processes and customer-related data can undermine the trust established with business partners and clients. Furthermore, as a company based in France, Pradier Granulats may face legal and regulatory scrutiny under the European Union's General Data Protection Regulation (GDPR) due to potential exposure of personal data.

LockBit is a known Ransomware-as-a-Service (RaaS) group that has been tracked by security researchers since 2019. Although the group's infrastructure faced significant disruptions in February 2024, reports indicate that the group has since resumed its operations. The secondary risks associated with such leaks include the potential for the stolen data to be utilized in identity theft or for highly targeted phishing attacks against the company or its clients.

In general, ransomware leak sites are used by threat actors to conduct double extortion, where data is not only encrypted but also stolen to be used as leverage. Organizations facing such threats often focus on defensive measures such as robust backup strategies, multi-factor authentication, and continuous monitoring of network traffic to detect unauthorized access. For companies in the industrial and professional services sectors, maintaining strict access controls and regular security audits is essential to protect the integrity of commercial and audit-related data.