crowe.com.za listed by the lockbit3 ransomware group

Overview

LockBit 3.0 listed Crowe South Africa, the local member firm of the Crowe global accounting and consulting network, on its leak site on 29 January 2024.

What was published

The listing identified the firm as a victim. No detailed statement of stolen records or file types was published with the post.

Risks for affected individuals

Accounting and audit firms hold sensitive financial records of clients, payroll data and tax information. Exposure could enable fraud, phishing and reputational damage for the firm and its clients.

What remains unknown

The data categories and number of affected client records are not disclosed, and the eventual fate of the data is unconfirmed.

What affected people should do

Clients of the firm should monitor financial accounts and be alert to fraudulent instructions. The firm should notify regulators and affected clients according to applicable law.