competenz.co.nz Listed by lockbit3 Ransomware Group

On June 24, 2024, New Zealand training provider Competenz appeared on the LockBit 3.0 ransomware leak site. The group claims to have exfiltrated a large volume of the organisation’s internal files during a ransomware attack, listing the company as a victim and publishing a sample of the allegedly stolen material.

Primary Disclosure Details

The LockBit 3.0 leak page states that internal files were exfiltrated and threatens further publication unless a ransom is paid. The listing does not specify the exact number of records affected, nor does it provide a precise count of individuals whose data is contained in the archive. It does claim the stolen material includes a large quantity of passports, finance records, and banking documents. The disclosure indicates the data was taken from Competenz’s systems, which coordinate apprenticeships and on-the-job training programmes across multiple New Zealand industries. No independent verification of the full dataset has been published by the company at the time of writing.

Why This Matters for You and Your Family

If you or anyone in your household has completed an apprenticeship, traineeship, or vocational qualification managed by Competenz, your personal information may now sit in an attacker-controlled archive. Passports, banking details, and financial records are high-value targets because they allow criminals to open accounts, apply for credit, or impersonate you directly. Even when the leak-site listing does not quantify affected records, the nature of the data described means real-world exposure for apprentices, employers, and their families is likely. Once such information leaves a legitimate organisation’s control, it can circulate for years on underground markets.

Doxxing and Identity-Chain Risks

A single breach rarely stays isolated. Passport numbers and financial documents can be cross-referenced with emails, phone numbers, or usernames that appear in earlier leaks, rapidly building a complete identity profile. Attackers then use these chains to target gaming accounts, social-media profiles, or family members. Credential leaks of this type frequently cascade into account takeovers that expose children’s gaming handles, which in turn reveal home addresses or parent names. The result is persistent doxxing that can affect every member of a household long after the original breach is forgotten.

LockBit 3.0 Track Record

Public reporting attributes the LockBit 3.0 variant to a ransomware operation that first appeared in 2020 and rebranded to version 3.0 in early 2022. The group has claimed responsibility for attacks on hundreds of organisations worldwide, including manufacturers, healthcare providers, and education-related entities. Their typical playbook involves initial access through compromised remote desktop credentials or exploited vulnerabilities, followed by exfiltration of sensitive files before encryption. LockBit 3.0 operators usually publish samples on their leak site and set short payment deadlines, threatening to release the full archive or sell it to other criminals. While some law-enforcement actions have disrupted parts of the operation, new leak-site postings continue to appear regularly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used on competenz.co.nz or related training portals anywhere it has been reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to credential chaining from this claimed breach.
• Let remediation specialists manage data-broker takedown requests and ongoing exposure reduction on your behalf.

The Competenz listing is a reminder that vocational training records are now prime targets for financially motivated ransomware groups. Taking concrete steps today limits how far attackers can travel along the identity chain created by this and future leaks. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts at risk from cascading credential abuse.