RegistroCiberVE
All incidents
unconfirmed ransomware listing Public report: Date confidence: Low

Presunto incidente contra Cencozotti atribuido a LockBit 2.0

Un supuesto incidente contra cenco-zotti.com fue atribuido a LockBit en una tabla titulada 2 de agosto de 2021 y publicada el 9 de agosto. Otro registro de monitoreo lo asocia con LockBit2 y descubrimiento el 10 de septiembre de 2021; su CSV conserva el mismo dato y una lista retrospectiva lo repite. Estas fuentes acreditan listados públicos, no una intrusión confirmada. No se localizaron declaración de Cencozotti, publicación original o archivo del actor, nota de rescate, artefacto técnico, prueba de cifrado o exfiltración ni impacto operativo. Las referencias previas a 44,7 GiB y RT35V.zip carecen de respaldo recuperable y se eliminan.

Overview

Missing evidence

declaración oficial de Cencozotti S.A.publicación original o archivo independiente del actor o sitio de filtracionesnota de rescate, muestra, telemetría o artefacto técnico que confirme compromiso o cifradoprueba de exfiltración, categorías o volumen de datosevidencia de indisponibilidad, impacto operativo o recuperación

Impact details

Solo se verificaron listados públicos que asocian cenco-zotti.com con LockBit 2.0. No se confirmó compromiso, cifrado, exfiltración, categorías o volumen de datos, indisponibilidad ni impacto operativo. El estado del servicio permanece sin confirmar.

Classification & severity

Category
Undetermined
Subtype
unconfirmed ransomware listing
Confidence
Low

A public ransomware or data breach tracker, or a report on ransomware, identifies the victim as part of a ransomware or extortion campaign; confirmation from the victim is not yet available.

Severity assessment

Affected scope
Organization-wide
Critical service
None

El registro conserva una alegación pública contra una organización privada ordinaria, sin evidencia de compromiso, cifrado, filtración, indisponibilidad, daño financiero o recuperación. La gravedad real permanece desconocida.

Timeline

Claim

Cybercrimeinfo agrupó a cenco-zotti.com junto a LockBit en su tabla del 2 de agosto. La página fue publicada el 9 de agosto y no aporta publicación del actor ni evidencia técnica.

Discovery

Ransomware.live registró cenco-zotti.com bajo LockBit2. Su página y CSV acreditan el listado público, no una intrusión confirmada.

Evidence & sources

4 sources

Ransomware.live — Victim: cenco-zotti.com

Ransomware.live / Julien Mousqueton Sep 10, 2021
Primary Security research Source confidence: Medium

What this source supports

  • The exact Ransomware.live page currently lists cenco-zotti.com under Lockbit2
  • the page displays a discovery timestamp of 2021-09-10 00:40 UTC and an estimated attack date of 2021-09-10
  • the page establishes a public ransomware-monitoring listing, not an independently confirmed compromise, encryption, exfiltration or operational impact
  • the page legal disclaimer says the service indexes publicly visible information and does not acquire or possess the underlying stolen content

Evidence limits

Ransomware.live is primary for the existence and contents of its own tracker record, but the page is an aggregator and supplies no direct actor post, archive of a leak page, victim confirmation or technical artifact. Its current dynamic enrichment must not be projected back to 2021.

Relevance to this case

Strongest retained source for the public listing and 10 September discovery tuple; expressly bounded as claim provenance rather than incident confirmation.

Overzicht cyberaanvallen week 31-2021

Cybercrimeinfo.nl / Peter Lahousse Aug 9, 2021
Corroborating Media report Source confidence: Low

What this source supports

  • The roundup places cenco-zotti.com beside LockBit in the table headed 2 August
  • the page was published on 9 August 2021 and therefore supports an earlier reported listing date, not a directly observed attack date
  • the table supplies no actor post, technical artifact, impact, data volume or victim confirmation

Evidence limits

The roundup is independent only as publication history; the target row may ultimately derive from the same actor/leak-site ecosystem and conflicts with Ransomware.live's 10 September discovery date.

Relevance to this case

Retained to preserve the earliest located public listing history while explicitly separating the table heading, page-publication date and unknown underlying claim date.

Ransomware.live live victims CSV

Ransomware.live data service
Corroborating Security research Source confidence: Low

What this source supports

  • The live CSV currently contains the row cenco-zotti.com, lockbit2, 2021-09-10T00:40:42.949486+00:00
  • the CSV is the machine-readable representation of the same Ransomware.live data lineage and is not independent corroboration
  • the row does not establish compromise, encryption, exfiltration or operational impact

Evidence limits

Mutable derivative feed without a fixed archived snapshot. It verifies the current feed tuple only and adds no independent incident evidence.

Relevance to this case

Preserved for machine-readable provenance and explicitly downgraded because it duplicates the Ransomware.live source lineage.

Un cofondateur de Lockbit arrêté ?

ZATAZ.COM / Damien Bancal Nov 17, 2022
Context Media report Source confidence: Low

What this source supports

  • The retrospective text lists cenco-zotti.com 10/09/2021 under LockBit 2.0
  • the article says its multi-year victim list is incomplete
  • the repeated domain/date tuple corroborates public claim history but not an actual compromise, encryption, theft or impact

Evidence limits

Retrospective secondary list without an incident-specific screenshot, direct leak page, archive, victim statement or technical artifact; likely repeats tracker/leak-site data rather than independently validating it.

Relevance to this case

Retained only as later corroboration that the same domain/date tuple circulated publicly.