LockBit ransomware leaks government contractor data

The LockBit ransomware gang leaked 1Gb of data allegedly stolen from the District of Columbia Department of Insurance, Securities and Banking (DISB).

See also: LockBit ransomware: $10 million reward for information on its leaders

The LockBit ransomware group claims to be in possession of 800 GB of data related to DISB, the US Securities and Exchange Commission (SEC), Delaware banking institutions, and other financial entities, and is threatening to leak it unless DISB pays a ransom.

The data appears to have been stolen from DISB's STAR system customer in late March, during a cyberattack on Tyler Technologies, a provider of software and services for the public sector.

In separate incident announcements, Tyler and DISB revealed that the attack involved unauthorized access to a cloud hosting DISB. The system was immediately taken offline, and while the file-encrypting LockBit ransomware was deployed on the compromised system, Tyler was working to restore the environment and associated data using available backups.

See also: LockBit ransomware: Arrests of members and decryption tool

In an April 19 update, Tyler confirmed that information allegedly stolen from the STAR system was leaked online ,but said the full scope of the data breach has yet to be determined.

Potentially compromised information by LockBit ransomware may include names, dates of birth, social security numbers, driver's license numbers, and other information.

"We have confirmed evidence that the malicious actor obtained information from the systemforensic experts cybersecurity to identify the full impact. As of April 18, the threat actor has been publishing information it claims to have obtained from the STAR system," the company said.

Tyler also noted that it has not yet identified individuals whose personally identifiable information (PII) may have been stolen in the LockBit ransomware attack and that it will begin notifying them once the identification process is complete.

See also: LockBit ransomware: Developers had created a new version before the authorities "hit" it

How can a user protect themselves from ransomware attacks?

Ransomware attacks, such as those by the LockBit group, are a serious threat to digital security. Users can protect themselves by installing and updating reliable antivirus software. This software can identify and isolate ransomware before it can cause damage. In addition, users should regularly back up their important files. It is also important to be careful with their emails. Finally, users should constantly stay informed about the latest techniques and tools used by attackers. Knowledge is the best defense against ransomware attacks.

Source: securityweek