LockBit ransomware group claims to have compromised accounting firm Xeinadin
LockBit ransomware claims to have hacked accounting firm Xeinadin and threatens to leak the allegedly stolen data.
LockBit ransomware has claimed responsibility for hacking the Xeinadin accounting firm and is threatening to release the allegedly stolen data.
Xeinadin has over 60,000 customers across the UK and Ireland. In 2021, the firm gained significant support from Exponent, one of the UK’s leading private equity investors, propelling it to become one of the top 20 accountancy firms in the UK.
The Lockbit ransomware group has added Xeinadin to its list of victims of Tor leak sites.
The ransomware group claims to have stolen 1.5 terabytes of Xeinadin customer data. Compromised data includes:
- Among the stolen data are:
- All internal databases.
- Customer finances.
- passport.
- Account balance.
- Access to Xeinadin’s Companies House customers’ personal accounts.
- Client legal information.
- Much more.
The gang is threatening to release the data if the company does not contact them by a deadline of December 25, 2023.
“We encourage Xeinadin management to contact us to correct the mistake and prevent a large-scale leak of customer data. If you do not contact us, we will publish here your legal, tax, financial and other personal data of hundreds of companies in the UK and Ireland,” reads a message published by the ransomware group on the Tor leak site.
![Zeinadine Rockbit](https://i0.wp.com/securityaffairs.com/wp-content/uploads/2023/12/image-32.png?resize=1024%2C566&ssl=1)
The ransomware group published three screenshots showing the database scheme and storage structure that made up the compromised infrastructure.
Follow us on Twitter: @securityaffairs and Facebook and mastodon
(Security related matters – hacking, data breach)