LockBit Ransomware Group Claims Cyberattack on Queensland-Based Poole Group
A prominent ransomware gang, LockBit, has listed Poole Group, a Queensland-based accounting and business advisory firm, on its dark web leak site, alleging the theft of company data. The group has set a countdown timer for October 25, threatening to release the stolen information unless demands are met.
Founded in 1980, Poole Group provides services in tax, accounting, superannuation, HR support, audits, and wealth advisory to clients across the Sunshine Coast. The company confirmed the incident, stating it had detected a cyber breach in its IT environment and immediately implemented containment measures. External cybersecurity specialists have been engaged to assist with the investigation.
While LockBit has not disclosed specifics about the stolen data or ransom demands, Poole Group has notified key authorities, including the Office of the Australian Information Commissioner (OAIC), the Australian Cyber Security Centre (ACSC), and the Australian Taxation Office (ATO). The firm stated it would contact affected individuals directly if personal data was compromised.
LockBit, a ransomware-as-a-service (RaaS) operation active since 2019, employs a double-extortion model, encrypting and exfiltrating data before demanding payment. The group has previously targeted high-profile organizations, including Boeing, the UK Royal Mail, and multiple U.S. government agencies. Despite recent law enforcement disruptions, LockBit remains a persistent threat in the cybercrime landscape.
Poole Group TPRM report: https://www.rankiteo.com/company/poole-group
"id": "poo1792110247",
"linkid": "poole-group",
"type": "Ransomware",
"date": "10/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Accounting, Tax, Superannuation, HR '
'Support, Audits, Wealth Advisory',
'location': 'Queensland, Australia',
'name': 'Poole Group',
'type': 'Accounting and business advisory firm'}],
'customer_advisories': 'Will contact affected individuals if personal data '
'was compromised',
'data_breach': {'data_exfiltration': 'Alleged data theft'},
'description': 'A prominent ransomware gang, LockBit, has listed Poole Group, '
'a Queensland-based accounting and business advisory firm, on '
'its dark web leak site, alleging the theft of company data. '
'The group has set a countdown timer for October 25, '
'threatening to release the stolen information unless demands '
'are met.',
'impact': {'data_compromised': 'Company data allegedly stolen'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain (extortion)',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'LockBit'},
'references': [{'source': 'LockBit dark web leak site'}],
'regulatory_compliance': {'regulatory_notifications': ['Office of the '
'Australian '
'Information '
'Commissioner (OAIC)',
'Australian Cyber '
'Security Centre '
'(ACSC)',
'Australian Taxation '
'Office (ATO)']},
'response': {'communication_strategy': 'Notified authorities and will contact '
'affected individuals if personal data '
'was compromised',
'containment_measures': 'Immediately implemented',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'No (but key authorities notified)',
'third_party_assistance': 'External cybersecurity specialists '
'engaged'},
'threat_actor': 'LockBit',
'title': 'LockBit Ransomware Group Claims Cyberattack on Queensland-Based '
'Poole Group',
'type': 'Ransomware'}