Lockbit3 ransomware group lists synnex-grp.com on its leak site

• Ransomware group: Lockbit3
• Country: Taiwan
• Sector: Technology
• Announcement date: January 22, 2024

Lockbit3 claims data breach against Synnex Technology International Corporation

The Lockbit3 ransomware group has published a listing on its leak site claiming to have stolen data belonging to Synnex Technology International Corporation. According to the announcement made on January 22, 2024, the threat actor group asserts that they have successfully exfiltrated a significant volume of information from the organization.

Details of the alleged attack

The Lockbit3 group has officially listed synnex-grp.com on its dedicated leak platform. The group claims to have published approximately 95.84 GB of data that is allegedly associated with the organization. Based on the information provided in the listing, the data was reportedly updated on January 21, 2024. While the group has made these claims public, the specific nature and content of the stolen files remain unverified by the organization.

Regarding the specific types of information contained within the breach, the listing names no specific data types. However, the group has provided an archive file totaling approximately 95.84 GB for public access on their site.

About Synnex Technology International Corporation

Synnex Technology International Corporation is a major player in the global technology market. It serves as the largest distributor of information technology, communication, consumer electronics, and semiconductor products within the Asia-Pacific region. Since its establishment in 1988, the company has played a critical role in the industry, managing complex supply chain and distribution services for a vast array of technology products.

Risk assessment and industry implications

This leak may pose significant risks to the organization's operational continuity and its commercial reputation. Depending on the actual content of the shared data, several secondary risks may arise. If employee or customer information is exposed, the organization could face incidents such as identity theft or targeted phishing attacks. Furthermore, as the organization is based in Taiwan, the incident may trigger compliance processes related to local data protection regulations.

The threat actor involved, Lockbit3, operates as a Ransomware-as-a-Service (RaaS) structure. This model allows developers to lease their malware to affiliates, facilitating a wide range of attacks. This group has been active since 2019 and has notably resumed operations despite international interventions aimed at its infrastructure in February 2024. The persistence of such groups highlights the evolving nature of the threat landscape.

For organizations operating within the technology and distribution sectors, such incidents underscore the importance of robust cybersecurity postures. The involvement of a major distributor can create secondary risks for the organization's various supply chain partners. To mitigate such risks, organizations typically focus on strengthening their defensive layers, implementing strict access controls, and maintaining comprehensive monitoring to detect unauthorized data movement. Protecting the integrity of the supply chain is essential to prevent cascading effects across the broader technological ecosystem.