Ransomware Group: LOCKBIT3

VICTIM NAME: ossc[.]mx

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the LOCKBIT3 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with OSSC Mexico was published on February 25, 2025, and was discovered on the same day. The posting introduces OSSC as a company founded in 2008, which specializes in developing payroll software named GIRO. The page provides a brief overview of the company, although the exact details beyond this primary description remain unspecified. The company appears to have a significant background in the payroll software industry, potentially indicating its role in the financial technology sector. While specific information about the compromise date is not available, the published date serves as the reference point for the potential data breach.

The leak page is hosted by the LockBit3 ransomware group and indicates that the content may have further implications for the security of OSSC Mexico. Screenshots of internal documents related to OSSC Mexico are present, providing visual evidence of the breach without detailing specific contents of the images. The extracted information does not highlight the number of affected employees or third parties, suggesting that comprehensive breach details were not disclosed. The page also contains links for further exploration, although no exact URLs are provided since these would expose sensitive locations.