londondrugs.com Listed by lockbit3 Ransomware Group

On April 28, 2024, the ransomware group LockBit3 added londondrugs.com to its public leak site, claiming that internal files had been exfiltrated from the Canadian retail pharmacy chain during a ransomware attack. Anyone who has shopped at London Drugs, filled a prescription there, or created an online account may have personal information now in the hands of extortionists.

Reported Details from the Listing

The LockBit3 leak site states that London Drugs suffered a ransomware attack and that attackers successfully exfiltrated internal files. The disclosure does not quantify how many records were taken, list specific data types beyond “internal files,” or reveal the ransom demand. It simply marks the company as compromised and provides a partial sample of the stolen material to pressure the victim. The exact volume and sensitivity of the data remain unknown to the public because the primary listing gives no further breakdown.

Why This Matters for You and Your Family

London Drugs handles prescriptions, loyalty accounts, payment details, and contact information for millions of everyday customers across Western Canada. When internal files leave the company’s control, the exposure can include names, addresses, dates of birth, phone numbers, email addresses, and partial financial records. Any of these pieces can be combined with data from earlier breaches to impersonate you, open fraudulent accounts, or target your family with phishing and identity theft. Because the breach involves a pharmacy, health-related details may also be present even if the leak site does not explicitly say so.

The Doxxing and Identity-Chain Risk

Stolen internal files rarely stay isolated. Attackers and subsequent buyers on dark-web markets routinely cross-reference new leaks against older ones, building detailed profiles that link your shopping habits, email addresses, phone numbers, and family relationships. A single reused password or exposed loyalty number can cascade into account takeovers on email, banking, or social media. Children’s accounts are especially vulnerable because parents often reuse credentials across household services, including gaming platforms that tie back to the same home address. Once the chain begins, doxxing escalates quickly from leaked data to real-world harassment.

LockBit3’s Known Track Record

Public reporting attributes LockBit3 as the current iteration of the LockBit ransomware operation, which first appeared in 2019 and rebranded after law-enforcement actions against earlier versions. The group has targeted hospitals, retailers, manufacturers, and municipalities worldwide. Its typical playbook involves initial access through compromised credentials or vulnerable remote desktop services, followed by rapid exfiltration of sensitive files before encryption. LockBit3 then posts samples on its leak site and sets extortion deadlines, threatening to release the full archive if payment is not made. The group’s leak site remains one of the most active ransomware boards despite repeated takedowns.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you used on londondrugs.com wherever it appears elsewhere, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same breached credentials.
• Let remediation specialists handle ongoing takedown requests for any exposed personal documents or broker listings tied to this incident.

The incident underscores that even large retail pharmacies remain targets and that your data can surface on leak sites without warning. Start your DoxxScan trial today; its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage—including children’s gaming accounts—give you and your family the practical defense needed when breaches like London Drugs occur.