Lockbit3 ransomware group lists preidlhof.it on its leak site

• Ransomware group: Lockbit3
• Country: Italy
• Sector: Hospitality
• Announcement date: November 24, 2023

LockBit3 claims attack on preidlhof.it

The hospitality business preidlhof.it has been listed on the leak site of the LockBit3 ransomware group. This announcement, which surfaced on November 24, 2023, indicates that the organization has been targeted by the threat actor group. According to the claims made by the group, the attack occurred on the same day the announcement was posted.

The LockBit3 group has initiated a countdown process as part of their extortion tactics. This mechanism is a common feature of modern ransomware operations, where attackers use time pressure to coerce victims into meeting their demands. The group has threatened to publish the institution's data if their conditions are not met. As of the latest reports, the announcement remains active on the group's website.

Details regarding the alleged data breach

While the listing is active, there is no specific detail regarding the content of the allegedly leaked data in the provided records. The group has not specified the nature of the files or the categories of information that have been compromised during this incident.

• No specific data types were named in the listing.

In many ransomware incidents, threat actors employ a tactic known as double extortion. In this scenario, attackers do not only encrypt an organization's systems to disrupt operations but also steal sensitive information. They then threaten to release this data on public leak sites to increase the pressure on the victim to pay the ransom. This method aims to exploit the reputational and legal risks associated with data exposure.

About preidlhof.it

Preidlhof is an award-winning 5-star spa hotel located in Naturns, South Tyrol, Italy. Owned by the Ladurner family, the facility offers comprehensive wellness programs alongside luxury accommodation and hospitality services.

Risk assessment and implications for the sector

The actions taken by the LockBit3 group may put the institution's operational processes and customer data at risk. Because the organization operates within Italy, a potential data breach could lead to legal sanctions under the General Data Protection Regulation (GDPR). The exposure of guests' personal information could create a foundation for identity theft and targeted phishing attacks.

LockBit is a Ransomware-as-a-Service (RaaS) group that has been monitored since 2019. Despite an international operation against its infrastructure in February 2024, the group continues to show signs of activity. This persistence highlights the ongoing threat posed by sophisticated ransomware networks.

For organizations operating in the hospitality sector, such incidents underscore the importance of robust cybersecurity postures. To mitigate risks, it is advisable for institutions to review their data security processes and make necessary notifications regarding potential breaches. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security audits to identify vulnerabilities before they can be exploited by threat actors.