sogebank.com Listed by lockbit3 Ransomware Group

On August 15, 2022, the LockBit3 ransomware group listed sogebank.com on its leak site, announcing that it had exfiltrated internal files from Groupe Sogebank, a Haitian commercial bank founded in 1986. The disclosure indicates that data was taken during a ransomware attack, though the exact volume of records and the specific types of customer or employee information involved remain unknown.

Details from the Leak Site

The primary disclosure on the LockBit3 leak site states that internal files were exfiltrated from Sogebank. It describes the bank as a generalist commercial institution serving organizations, industrial clients, and individuals in Haiti. The listing does not quantify affected records, nor does it specify which categories of data were allegedly stolen beyond the broad term “internal files.” A deadline for payment was set, after which the group threatened to publish the material. Public reporting on LockBit3 indicates that such postings typically follow unsuccessful ransom negotiations.

Why This Matters for You and Your Family

If you hold an account at Sogebank, work there, or have ever shared personal information with the bank, your data may now sit in an attacker-controlled archive. Internal files from a commercial bank often contain names, addresses, tax identifiers, account numbers, transaction histories, and scanned documents. Even without an exact count of affected individuals, the exposure creates immediate risk for anyone whose records were stored in the compromised systems. Your family members who share addresses, phone numbers, or joint accounts face the same exposure. Once this material surfaces on underground forums, it can be resold and reused for years.

The Doxxing and Identity-Chain Implications

Banking data leaks rarely stay isolated. A single exposed email or phone number can be correlated with credentials from other breaches, gaming accounts, or social-media profiles. Attackers chain these fragments to build complete identity profiles that enable account takeovers, loan fraud, and targeted extortion. Children’s gaming accounts linked to a parent’s reused password or shared family address are especially vulnerable because gaming platforms often rely on the same email addresses that appear in financial records. The result is a cascading doxxing risk that can affect every member of a household long after the initial breach is forgotten.

LockBit3’s Known Track Record

Public reporting attributes the LockBit3 variant to operators who first appeared under the LockBit name in 2019 and rebranded to LockBit 3.0 in early 2022. The group has targeted banks, healthcare providers, manufacturers, and government agencies across dozens of countries. Its typical playbook begins with initial access gained through compromised remote desktop credentials or phishing, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. If ransom is not paid, LockBit3 publishes samples on its leak site and offers the full archive for sale to other criminals. The group’s leak sites have remained among the most active ransomware extortion platforms since their emergence.

What to do

• Rotate any password you used at sogebank.com anywhere else it appears and switch to 2FA through an authenticator app rather than SMS.
• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you is flagged within hours.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same contact details.
• Let remediation specialists manage takedown requests for any exposed personal documents that appear on data-broker or extortion sites.

The incident underscores that banking data stolen in 2022 can still surface and be weaponized today. Start your DoxxScan trial to gain continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts. Doing so gives you and your family a practical defense against the long tail of leaks like this one.