bcncruiseport.com Listed by lockbit3 Ransomware Group

On April 13, 2023, the Barcelona Cruise Port (bcncruiseport.com) appeared on the LockBit 3.0 ransomware leak site, claiming that its internal files had been exfiltrated during a ransomware attack. The listing affects anyone whose personal or employment records passed through the five-terminal cruise facility that handles millions of passengers each year at the Port of Barcelona.

Primary Disclosure Details

The LockBit 3.0 leak page states that internal files were exfiltrated from bcncruiseport.com and gives the company a deadline to negotiate or face full publication. The disclosure does not quantify how many records were taken, list specific data types beyond “internal files,” or name the exact systems compromised. Public mirrors of the leak site, including ransomware.live, preserve the original post dated April 13, 2023, at the onion address http://lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion/post/kJ9806seujkxl4Nc64374e0937e5a. No separate breach notification from the company has surfaced, so the full scope remains unknown to the public.

Why This Matters for You and Your Family

Cruise ports collect names, passport details, dates of birth, contact information, travel itineraries, and sometimes payment records for passengers, crew, and port employees. When those records are stolen, the exposure follows you long after the trip ends. Any Barcelona Cruise Port customer or worker from the past several years should treat their data as circulating in criminal markets. Families who cruised together now share the same breach footprint, multiplying the risk if one member’s email or phone number is later used to reach others.

Doxxing and Identity-Chain Implications

Ransomware operators rarely stop at the first leak. Stolen internal files often contain spreadsheets that link employee or customer identities to addresses, phone numbers, and sometimes family members listed as emergency contacts. These fragments become the starting point for doxxing chains: an email from the port breach is cross-referenced with gaming usernames, social-media handles, and child accounts. Once the chain is built, attackers can impersonate family members, reset passwords on linked services, or sell the package to identity thieves. Credential leaks of this kind routinely cascade into account takeovers on Steam, Roblox, Discord, and other platforms where children reuse passwords or security questions derived from travel documents.

LockBit 3.0 Track Record

Public reporting attributes LockBit’s original version to 2019, with LockBit 3.0 emerging in 2022 after the group rebranded and began offering ransomware-as-a-service to affiliates. The gang has hit hospitals, schools, logistics firms, and port operators worldwide. Their standard playbook involves initial access through compromised remote desktop credentials or vulnerable web applications, followed by rapid exfiltration of sensitive files before encryption. They then publish samples on their leak site and threaten to release the full archive unless payment is made, frequently extending deadlines or offering “discounts” to pressure victims. The Barcelona Cruise Port listing follows this exact pattern.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any data that may have originated from the Barcelona Cruise Port breach.
• Rotate passwords used for any Barcelona Cruise Port online account or any service where you reused the same credentials, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become targets when travel-related personal data creates an identity chain.
• Let remediation specialists handle takedown requests for any exposed personal documents or broker listings that surface from this incident.

The incident shows once again that travel and logistics organizations remain high-value targets whose compromises directly expose ordinary travelers and workers. Starting a DoxxScan trial today gives you continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists who can also protect gaming accounts belonging to you or your children. Source: LockBit 3.0 leak site listing (via ransomware.live).