interfides.de Listed by lockbit3 Ransomware Group

On May 9, 2023, German tax advisory firm interfides.de appeared on the LockBit 3.0 ransomware leak site, claiming that the company had been hit by a ransomware attack in which internal files were exfiltrated.

Reported Details from the Listing

The LockBit 3.0 leak page states that interfides Steuerberatungsgesellschaft mbH suffered a ransomware intrusion and that attackers successfully removed internal files. The disclosure does not quantify the number of records affected, list specific data types beyond “internal files,” or reveal the exact date of initial compromise. It does, however, set a public countdown for the publication of the stolen material if the company does not meet the group’s demands. interfides, founded in 1978, provides tax and business advisory services primarily to foreign clients operating in Germany; the leak therefore concerns sensitive financial, corporate, and personal tax records belonging to both the firm and its international clientele.

Why This Matters for You and Your Family

When a tax advisory company is breached, the data exposed often includes names, addresses, tax identification numbers, income details, bank account information, and correspondence that can be used for identity theft or fraudulent filings. Even though the exact volume of data is unknown, any client whose records were stored on the compromised systems now faces heightened risk of targeted phishing, loan fraud, or tax-related scams. If you or any member of your family has worked with interfides or another German tax advisor serving cross-border clients, your personal financial footprint may already be in attackers’ hands. The breach also underscores how small and mid-sized professional service firms remain high-value targets precisely because they hold concentrated, high-quality personal and corporate data.

The Doxxing and Identity-Chain Risk

Stolen internal files rarely stop at one company. Tax records frequently contain email addresses, phone numbers, client contracts, and notes that link professional identities to home addresses and family members. Once attackers possess these connections, they can chain them with other breaches to build detailed profiles. A single leaked tax document can expose not only an individual but also spouses, children, and business partners. Credential leaks tied to such incidents routinely cascade into account takeovers, including gaming accounts belonging to children that often share the same email addresses or password patterns used for adult services. The result is a widening doxxing chain that can lead to harassment, SIM-swapping, or further extortion attempts against the household.

LockBit 3.0’s Known Track Record

Public reporting attributes LockBit’s initial emergence to 2019, with the rebranded LockBit 3.0 variant appearing in early 2022. The group has repeatedly targeted accounting firms, legal practices, and healthcare providers across Europe and North America. Their standard playbook involves stealthy initial access—often through compromised remote desktop credentials or vulnerable web applications—followed by rapid exfiltration of sensitive files before encryption. LockBit operators then deploy a double-extortion model: they threaten both to encrypt the victim’s systems and to publish the stolen data on their leak site. The group maintains an aggressive public countdown clock and has a history of releasing samples when deadlines pass, making the May 9, 2023 listing of interfides a credible warning rather than an idle threat.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what exposure looks like from this claimed breach.
• Rotate any password you used at interfides.de or with similar advisory services, then enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your data surfaces you learn within hours rather than months.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same breached credentials.
• Let DoxxScan remediation specialists manage takedown requests and broker removals for you instead of attempting manual cleanup across dozens of sites.

The interfides listing is a reminder that professional service providers remain soft targets whose compromises directly endanger the privacy of ordinary clients and their families. Acting quickly on credential hygiene and identity mapping can limit how far this claimed breach travels. Start your DoxxScan trial today and gain both immediate visibility into your exposure and hands-on assistance from specialists who treat your household’s digital footprint as their own. Their continuous monitoring, AI-powered identity-chain mapping, and family coverage—including children’s gaming accounts—provide practical defense against the cascading risks that incidents like this create.