divaris.com Listed by lockbit3 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People whose personal or business information may sit inside commercial real-estate systems have a practical reason to pay attention when a firm like divaris.com appears on a ransomware group's leak site. Even when the exact number of individuals affected remains unknown, the possibility that internal files have left the organisation's control can mean later risks of fraud, targeted phishing, or unwanted exposure of sensitive commercial details. Public reporting so far is limited, yet the listing itself is enough to warrant a clear look at what is known and what remains unconfirmed.

On 31 May 2024, the ransomware group lockbit3 listed divaris.com, claiming that internal files had been exfiltrated in a ransomware attack. No independent confirmation of the claim has been made public, and the scale of any compromise is undisclosed. For anyone who has dealt with the firm as a tenant, client, employee or partner, understanding the limited facts is the first step toward assessing personal exposure.

Breaking down the breach

The only concrete public detail is that lockbit3 listed divaris.com on its leak site on 31 May 2024 and asserted that internal files had been taken during a ransomware attack. The number of people affected is unknown. No technical description of the intrusion method, no timeline of when systems were first accessed, and no inventory of the specific files have been released in the available record. The listing itself constitutes a claim by the group rather than verified proof that data has been published or sold. Until further information surfaces from the organisation or independent investigators, the incident remains characterised solely by that claim of exfiltration of internal files.

Who is lockbit3?

Lockbit3 is a well-documented ransomware operation that has operated for several years under a ransomware-as-a-service model. Affiliates gain access to victim networks, deploy encryption tools, and often exfiltrate data before locking systems. The group maintains a public leak site where it names organisations it claims to have compromised and, in some cases, posts samples or full archives of stolen data if a ransom is not paid. Its typical tactics include double extortion—threatening both operational disruption and public release of data—and it has previously listed companies across many sectors. In this instance the group claims that divaris.com's internal files were taken; that assertion has not been independently verified in the public record.

divaris.com and its sector

Divaris.com is the online presence of Divaris, a commercial real-estate firm that describes itself as focused on moving commercial real estate forward through retail strategies, tenant portals, location services and related advisory work. Organisations of this type routinely handle lease documents, tenant contact information, financial records, property data and internal correspondence. A breach affecting such a firm is consequential because the data can touch both business partners and individuals who rent or manage commercial space. Even limited internal files can contain enough detail to enable follow-on social-engineering attempts or competitive harm. Public detail about the precise nature of any compromise at divaris.com remains limited to the lockbit3 listing.

What data was at risk

The available facts state only that internal files were claimed to have been exfiltrated. No further breakdown of data types—such as names, addresses, financial records, contracts or employee information—has been disclosed. Commercial real-estate firms typically hold lease agreements, tenant contact details, payment histories, property valuations and internal operational documents. Whether any of those categories were among the files referenced by lockbit3 is unconfirmed. Readers should treat the exact contents as unknown until the organisation or a reliable third-party investigation provides more information.

What's at stake

For individuals, the practical risks include phishing emails that appear to come from a familiar real-estate contact, attempts to exploit knowledge of leases or payments, and longer-term identity-related fraud if personal identifiers were present. For the organisation, the stakes involve potential operational disruption, reputational damage, regulatory scrutiny and the cost of investigation and remediation. Because the number of people affected is unknown and the precise data remains undisclosed, the full extent of these risks cannot yet be measured. The absence of confirmed publication of the files does not eliminate the possibility that copies exist outside the company's control.

What to do if you're exposed

If you have a past or current relationship with divaris.com—whether as a tenant, client, employee or vendor—monitor financial accounts and watch for unexpected messages that reference commercial-property matters. Change passwords on any related accounts and enable multi-factor authentication where available. Consider placing a fraud alert with credit bureaus if you believe personal identifiers could have been involved. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets; such a check provides an additional data point but does not replace ongoing vigilance. Stay alert for any official statements from the organisation that may clarify the scope of the incident.

AICompiled with AI assistance from public sources and published under our editorial standards.