BlueWaters breach and data dump announced by LockBit3

Above: The Lockbit announcement page on the dark web.

The ransomware group LockBit3 has published data files exfiltrated from BlueWaters on the dark web. The ransomware group set the deadline to publish the data online as December 09, 2023 after uploading the files on December 07.

The ransomware group boasts of four years and 98 days of continuous operation since September 03, 2019.

Cybersecurity researcher Shiva Parasram confirms that at least one of the links to published data files is a collection of 3.4 GB company information, which his cursory examination reveals includes a range of personally identifiable information including passport, company officer credit card information and ID scans along with other identification documents and data.

Lockbit’s download page for the BlueWaters data dump.

The data reveal page lists ten separate links to downloadable data, each titled differently. The zipped files that have been released are listed respectively as, bank.zip, confident.zip, credit.zip, data.zip, hr.zip, insurances.zip, mdp.zip, passports.zip, salary.zip and visa.zip. The bank.zip file is listed at 4.7GB and the data.zip file is a 3.4GB compressed file. The total databreach seems to be a total of more than 10GB of company data.

This is a breaking news story and will be updated as more information comes to hand.