Ransomware Group: LOCKBIT3

VICTIM NAME: candelasyasociados[.]es

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the LOCKBIT3 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On January 13, 2025, a post appeared on a ransomware leak site concerning a company identified as “CANDELAS Y ASOCIADOS S.L.” The company, based in Spain, specializes in providing advice to small and medium-sized enterprises (SMEs) and individuals, covering various aspects such as labor, tax, accounting, commercial issues, business consulting, and human resources. The leak indicates a potential breach of sensitive company data, although specific details regarding the extent of the information compromised have not been provided.

The post includes a screenshot that provides a visual representation related to the leak, although explicit details from the image have not been disclosed in the leak report. Furthermore, there are indications that no employees or third-party data have been mentioned as included in the leak. Additionally, no specific download links appear to have been identified on the page. The group associated with this incident is noted as “lockbit3,” which signifies the involvement of a known ransomware organization. This incident highlights ongoing cyber threats facing companies, particularly in sectors that provide critical services to SMEs.