Lamberts Business Systems Listed by incransom Ransomware Group

On July 9, 2025, the New Zealand company Lamberts Business Systems appeared on the leak site of the incransom ransomware group. The attackers published a message claiming to have exfiltrated internal files after the firm refused their demands. The notice lists Lamberts alongside several other New Zealand businesses it says also fell victim to the same operation.

Reported Details from Reporting

Public reporting indicates that Lamberts Business Systems, a provider of computer hardware, networks, copiers, printers and Microsoft-certified technical support, was listed on the incransom leak site. The group posted a short welcome message from the company’s own marketing text, followed by links to six affected organisations: qds.nz, itm.co.nz, innesdean.co.nz, genoese.co.nz, atstimber.co.nz and cust. The exact number of individuals whose data may have been exposed remains unknown. Available reporting describes the incident as a ransomware attack in which internal files were allegedly stolen and then threatened for release.

Why This Matters for You and Your Family

When a local IT services provider is hit, the information stolen can easily include customer records, invoices, contracts, email addresses, phone numbers and account details belonging to ordinary families and small businesses. Internal files exfiltrated in such attacks frequently contain scanned documents, payment information and correspondence that reveal where you live, who you bank with and which services you use. Once that material surfaces on a ransomware leak site, it stays available to identity thieves, scammers and harassers for years. Your family’s privacy is directly affected even if you never bought hardware from Lamberts yourself, because the company’s role as a supplier means it held data on many households across New Zealand.

The Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at publishing one company’s files. Stolen customer spreadsheets often contain email addresses, usernames and phone numbers that link to personal accounts on other platforms. These connections create what security analysts call an identity chain: one leaked credential leads to account takeovers, which yield more personal data, which fuels further doxxing. Gaming accounts belonging to children are especially vulnerable because kids frequently reuse passwords or email addresses tied to family billing information. A breach like this can cascade into harassment, SIM-swapping attempts or targeted phishing aimed at your household.

Incransom’s Publicly Known Track Record

Public reporting attributes the incransom group with a pattern of targeting small and mid-sized businesses, exfiltrating internal documents and then publishing samples on their leak site when victims do not pay. The group emerged in recent years and typically follows a classic ransomware playbook: initial access through common vulnerabilities or phishing, followed by data theft, encryption of systems where possible, and extortion based on the threat of public disclosure. Notable prior victims have included other regional service providers, though exact details remain limited in open sources. The group’s leak site continues to list new victims on a regular basis.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames and real-world identity so you can see exactly what this claimed breach exposes.
• Rotate the passwords you used at any of the listed New Zealand companies and enable 2FA through an authenticator app everywhere those credentials are reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught and acted on quickly.
• Cover the household with DoxxScan family protection that extends to children’s gaming accounts and other services that chain back to the same address or parental email.
• Let remediation specialists handle takedown requests and broker removals for you instead of attempting manual cleanup across dozens of sites.

The incident shows how quickly a single supplier breach can ripple into personal exposure for hundreds or thousands of ordinary customers. Taking concrete steps now limits how far attackers and opportunists can travel along your identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today and close the gaps before the next leak appears.