guestgroup.com.au Listed by lockbit3 Ransomware Group

Guest Group Pty Ltd, an Australian interior furnishings and retirement living company, was listed on the LockBit 3.0 ransomware leak site on 3 July 2023. The extortion group claims to have exfiltrated internal files during a ransomware attack on the business, which has operated for nearly 100 years and serves clients across property styling and aged-care sectors. Anyone whose personal information appears in those files — employees, residents, suppliers or contractors — now faces heightened risk of identity theft and follow-on fraud.

Reported Details from the Listing

The LockBit 3.0 leak site states that it obtained internal files from Guest Group Pty Ltd, also known as Guests Retirement Living. The disclosure does not quantify how many records were taken, list specific data types such as names, addresses, dates of birth or financial details, or reveal the volume of data. It simply states that information was exfiltrated during a ransomware incident and is now published as part of the group’s double-extortion tactic. The exact date the files were allegedly stolen also remains undisclosed in the listing.

LockBit operators gave the company a deadline to negotiate before releasing the material. As of the publication date, the data is openly accessible on their onion site, meaning anyone with the link can download it.

Why This Matters for You and Your Family

When a company that handles retirement living, property styling contracts or employee records is breached, the information exposed often includes details that can be used to impersonate you or your relatives. Retirement living clients and their families are frequent targets because medical, address and payment records can enable insurance fraud, government benefit scams or elder financial abuse.

Even if you never directly interacted with Guest Group, contractors, former staff or suppliers may have had their personal data stored in the compromised internal files. Once that information reaches criminal marketplaces, it can be combined with other breaches to build a complete profile. The result is increased spam, phishing calls, and attempts to access your bank accounts, tax records or government services.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stay isolated. A single exposed email, phone number or home address from this incident can be chained with credential leaks from other sources to take over online accounts. Gaming platforms are especially vulnerable: children’s usernames, shared family emails and reused passwords create direct pathways from corporate breaches to doxxing and account hijacking. Threat actors map these connections rapidly, turning one leak into persistent harassment or financial crime.

DoxxScan by GalaxyWarden continuously monitors across 13.1 billion+ breach records and more than 100 platforms, applies AI-powered identity-chain mapping to link handles, emails, phones and real-world identities, and provides hands-on remediation by specialists. Its household coverage extends protection to dependents and children’s gaming accounts that often become the next link in the attack chain.

LockBit 3.0 Track Record

Public reporting attributes the LockBit ransomware family’s initial appearance to 2019. It rebranded as LockBit 3.0 in early 2023 after previous versions were disrupted. The group has targeted organisations across healthcare, manufacturing, legal and government sectors in multiple countries. Notable prior victims include several large corporations whose internal documents, employee data and customer records were published when ransom demands went unpaid.

LockBit’s standard playbook involves initial access through phishing, remote desktop protocol brute-force or exploited vulnerabilities, followed by rapid exfiltration of sensitive files before encryption. They then demand payment to prevent publication, using a leak site to apply public pressure. The group frequently updates its tooling and recruits affiliates, which has allowed it to maintain high activity levels despite law-enforcement attention.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers and real identity, then use the cleanup to remove what you can.
• Enable continuous DoxxScan monitoring so the next breach exposing your information is caught within hours rather than months.
• Rotate any password you used at Guest Group or related services anywhere it has been reused, and switch on two-factor authentication through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that chain back to the same address or email.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf.

The Guest Group incident demonstrates how quickly corporate ransomware leaks become personal threats. Acting promptly limits how far attackers can travel along your identity chain. Start your DoxxScan trial today to gain both immediate visibility and specialist support that keeps your family safer as new leaks surface.