LockBit3 ransomware group lists securityalliancegroup.com on its leak site

• Ransomware group: LockBit3
• Country: Australia
• Sector: Professional Services
• Announcement date: October 9, 2022

LockBit3 claims data breach at Security Alliance Group

The LockBit3 ransomware group has announced the listing of securityalliancegroup.com on its leak site. This announcement marks a new development in the ongoing activities of the threat actor, as the group claims to have targeted the Australian-based consultancy firm.

The claimed attack and event details

On October 9, 2022, the LockBit3 group published a listing targeting the domain securityalliancegroup.com. Through this announcement, the group claims to have compromised the organization's data and has issued threats to release the information publicly. This type of tactic is often associated with double extortion, a method where threat actors not only encrypt an organization's systems but also steal sensitive data to use as leverage during ransom negotiations.

Since the date of the initial announcement, no further information regarding the organization's systems has been disclosed by the group. The group's use of a leak site serves as a public pressure tactic, intended to coerce the target into meeting ransom demands by threatening the exposure of proprietary or sensitive information.

Data and information status

Regarding the specific contents of the alleged breach, there is no screenshot or detailed information available regarding the content of the allegedly leaked data. The listing does not provide specifics regarding the volume of data or the specific types of files involved. Furthermore, the group has not disclosed any information regarding the size of the data or the specific file count. As of the current assessment, the listing names no specific data types.

Organization profile

Security Alliance Group is an Australian-based security and risk management consultancy firm. The company provides corporate security solutions, risk assessment, and strategic consulting services to its clients.

Threat assessment and industry implications

This type of announcement by the LockBit3 group may be a tactic to exert pressure on the organization to facilitate ransom payments. Given that the group has been active since 2019 and has continued operations despite international law enforcement efforts, the severity of the threat may be considered moderate.

If the data leak claims are verified, secondary risks such as identity theft or targeted phishing attacks against the organization's clients and employees may arise. A data breach within a professional services firm could lead to a loss of commercial reputation and potential administrative sanctions under relevant data protection regulations. For organizations operating in the professional services sector, maintaining robust data protection measures is essential to mitigate these risks.

In general, when organizations face such threats, common defensive steps include implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training for employees to prevent phishing. Monitoring for unauthorized access and ensuring timely responses to suspicious activity are also critical components of a comprehensive cybersecurity posture.