Lamberts Business Systems Listed by INC Ransom Ransomware Group

On July 9, 2025, the New Zealand company Lamberts Business Systems appeared on the leak site of the incransom ransomware group. The attackers published a message claiming to have exfiltrated internal files after the firm refused their demands. The notice lists Lamberts alongside several other New Zealand businesses it says also fell victim to the same operation.

What Public Reporting Shows

Public reporting indicates that Lamberts Business Systems, a provider of computer hardware, networks, copiers, printers and Microsoft-certified technical support, was listed on the incransom leak site. The group posted a short welcome message from the company’s own marketing text, followed by links to six affected organisations: qds.nz, itm.co.nz, innesdean.co.nz, genoese.co.nz, atstimber.co.nz and cust. The exact number of individuals whose data may have been exposed remains unknown. Available reporting describes the incident as a ransomware attack in which internal files were allegedly stolen and then threatened for release.

Why This Matters for You and Your Family

When a local IT services provider is hit, the information stolen can easily include customer records, invoices, contracts, email addresses, phone numbers and account details belonging to ordinary families and small businesses. Internal files exfiltrated in such attacks frequently contain scanned documents, payment information and correspondence that reveal where you live, who you bank with and which services you use. Once that material surfaces on a ransomware leak site, it stays available to identity thieves, scammers and harassers for years. Your family’s privacy is directly affected even if you never bought hardware from Lamberts yourself, because the company’s role as a supplier means it held data on many households across New Zealand.

The Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at publishing one company’s files. Stolen customer spreadsheets often contain email addresses, usernames and phone numbers that link to personal accounts on other platforms. These connections create what security analysts call an identity chain: one leaked credential leads to account takeovers, which yield more personal data, which fuels further doxxing. Gaming accounts belonging to children are especially vulnerable because kids frequently reuse passwords or email addresses tied to family billing information. A breach like this can cascade into harassment, SIM-swapping attempts or targeted phishing aimed at your household.