BlueWaters breach and data dump announced by LockBit3

Above: The Lockbit announcement page on the dark web.

The ransomware group LockBit3 has published data files exfiltrated from BlueWaters on the dark web. The ransomware group set the deadline to publish the data online as December 09, 2023 after uploading the files on December 07.

The ransomware group boasts of four years and 98 days of continuous operation since September 03, 2019.

Cybersecurity researcher Shiva Parasram confirms that at least one of the links to published data files is a collection of 3.4 GB company information, which his cursory examination reveals includes a range of personally identifiable information including passport, company officer credit card information and ID scans along with other identification documents and data.

Lockbit’s download page for the BlueWaters data dump.

The data reveal page lists ten separate links to downloadable data, each titled differently. The zipped files that have been released are listed respectively as, bank.zip, confident.zip, credit.zip, data.zip, hr.zip, insurances.zip, mdp.zip, passports.zip, salary.zip and visa.zip. The bank.zip file is listed at 4.7GB and the data.zip file is a 3.4GB compressed file. The total databreach seems to be a total of more than 10GB of company data.

This is a breaking news story and will be updated as more information comes to hand.

BlueWaters breach and data dump announced by LockBit3

By Mark Lyndersay / December 9, 2023

Cybersecurity researcher Shiva Parasram confirms that at least one of the links to published data files is a collection of 3.4 GB company information.

The flagellation of TSTT

By Mark Lyndersay / November 20, 2023

Customers were disappointed, citizens were uneasy and trust in the company was unnecessarily shaken.

What the blockchain tells us about the big business of ransomware

By OpEd / November 17, 2023

Payment is demanded in crypto currency because it is easily transferable across the Internet and avoids cross-border currency challenges.

Kent Western appointed TSTT CEO (ag), Lisa Agard “departs”

By Press Release / November 14, 2023

Kent Western was TSTT’s General Manager, Customer Experience and Marketing.

PriceSmart issues statement on data breach

By Press Release / November 14, 2023

"We have not yet found evidence of identity theft or fraud related to this event."

Taran Rampersad: Are websites increasing cybersecurity vulnerabilities?

By Taran Rampersad / November 13, 2023

People thought they could just buy a website and it would simply be done and they could go about their business.

TSTT’s dark night of the soul

By Mark Lyndersay / November 13, 2023

The laws that should govern the handling of misappropriated information are still frozen in the clauses of the Data Protection Act that have not been brought into local legislation.

Press Releases

Courts responds to notice of data breach

By Press Release / November 12, 2023

Our e-Commerce customers can be assured that none of their payment methods and password information was exposed in this incident from the previous e-Commerce platform