usherbrooke.ca Listed by lockbit3 Ransomware Group

On December 6, 2023, the ransomware group LockBit3 added usherbrooke.ca to its public leak site, claiming that it had exfiltrated internal files from Université de Sherbrooke, a public Roman Catholic university in Quebec, Canada. The listing indicates that data was taken during a ransomware attack, although the exact volume and full list of contents remain undisclosed by the group. Anyone affiliated with the university — students, faculty, staff, alumni, or their families — may now face heightened risks from this exposure.

Reported Details from the Listing

The LockBit3 leak site states that internal files were exfiltrated from Université de Sherbrooke’s systems. The disclosure does not quantify how many records were taken, nor does it specify the precise data types beyond “internal files.” No ransom demand figure or payment deadline is listed in the public posting. The incident is explicitly attributed to a ransomware attack that included both encryption of systems and subsequent data theft for extortion purposes. Public reporting on LockBit3 confirms this dual approach is standard for the group.

Why This Matters for You and Your Family

If you or anyone in your household has ever attended, worked at, or interacted with Université de Sherbrooke, your personal information could be among the stolen files. Internal files from a university environment often contain names, dates of birth, addresses, Social Insurance Numbers, academic records, financial aid details, and correspondence that can be used to commit identity theft or fraud. Even when exact record counts are unknown, the exposure creates immediate risk because criminals treat university data as a rich source for long-term targeting of individuals and their families.

Doxxing and Identity-Chain Implications

Stolen university records frequently serve as the foundation for doxxing chains. A single exposed email or phone number can be cross-referenced with gaming accounts, social-media handles, and family addresses to build a complete profile. This linkage turns one breach into repeated targeting: attackers use the data to reset passwords on linked services, impersonate you to family members, or publish personal details online. Credential leaks of this nature routinely cascade into account takeovers, especially for gaming platforms used by children and teenagers who share household information.

LockBit3’s Publicly Known Track Record

Public reporting attributes LockBit3 as the successor to earlier LockBit iterations that first appeared in 2019. The group has targeted organizations across healthcare, education, manufacturing, and government sectors. Notable prior victims include numerous North American universities and public institutions. Their typical playbook begins with initial access gained through compromised credentials or remote desktop exploits, followed by lateral movement, data exfiltration, and then dual extortion: threatening both system encryption and public release of stolen files. The group maintains an active leak site to pressure victims who refuse payment, often releasing samples or full archives after set deadlines.

What to do

• Run a DoxxScan to map every link between your university email, handles, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used at usherbrooke.ca anywhere else it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent credentials.
• Let the remediation specialists perform hands-on takedown requests across data brokers and extortion sites on your behalf.

The incident underscores that even respected public institutions remain vulnerable to determined ransomware operators who prioritize data theft for leverage. Protecting yourself and your family requires more than reactive checks; it demands ongoing visibility into how your information travels across the internet. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and over 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, including household coverage that protects children’s gaming accounts from cascading takeovers. Start your DoxxScan trial today to regain control before the next leak appears.