frs-fnrs.be Listed by lockbit3 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On October 19, 2023, frs-fnrs.be — the online presence associated with Belgium’s National Fund for Scientific Research — was listed by the lockbit3 ransomware group. Available public information states that internal files were exfiltrated in a ransomware attack. The number of people affected is unknown, and further specifics have not been disclosed.

The listing is consequential because the organisation sits at the centre of national scientific funding in Belgium and routinely handles institutional, research and personal data. Until more is confirmed, the precise scope of exposure remains limited to what has been publicly reported.

Breaking down the breach

Public reporting records that frs-fnrs.be was listed by lockbit3 on October 19, 2023. The facts describe the incident as a ransomware attack in which internal files were allegedly exfiltrated. No confirmed figures are available for the volume of data taken, the exact date of initial intrusion, the attack vector, or the number of individuals whose information may be involved. Those details remain undisclosed. The lockbit3 listing itself constitutes the group’s claim that it conducted the attack and obtained material; independent verification of the full extent is not contained in the available record.

Who is lockbit3?

LockBit 3.0, commonly referenced as lockbit3, is a long-running ransomware-as-a-service operation. The group typically gains access to an organisation’s network, steals data, encrypts systems, and pressures victims by threatening to publish the stolen material on its leak site if a ransom is not paid. It has targeted entities across many countries and sectors. Its public leak-site listings are claims of successful intrusion and data theft. In this case, the facts establish only that lockbit3 listed frs-fnrs.be; they do not supply additional statements or proof from the group beyond that listing, nor do they state the organisation’s internal findings.

frs-fnrs.be and its sector

frs-fnrs.be is linked to the National Fund for Scientific Research (NFSR), known in Dutch as the Nationaal Fonds voor Wetenschappelijk Onderzoek (NFWO) and in French as the Fonds National de la Recherche Scientifique (FNRS). The body has long served as a principal Belgian mechanism for supporting scientific research through grants, fellowships and related programmes. Institutions of this type normally maintain records of researchers, applicants, peer reviewers, project proposals, financial allocations, contracts and internal administration. A breach affecting such an organisation raises concerns about the confidentiality of research-related and personal information and about continuity of trust in a national funding body.

What was likely exposed

The only data description given in the facts is that internal files were allegedly exfiltrated in the ransomware attack. No inventory of specific file categories, personal-data fields or document counts has been made public, and the exact contents remain unconfirmed. Organisations that fund and administer scientific research typically hold administrative documents, grant and contract records, contact details for staff and researchers, and correspondence with academic partners. Whether any of those categories were among the files taken in this incident cannot be stated as fact from the available information.

Why it matters

For people whose details may appear in the organisation’s systems — researchers, applicants, staff or partners — the practical risks include targeted phishing that leverages internal knowledge, possible misuse of contact or professional information, and uncertainty about what third parties might now possess. For the organisation itself, consequences can include operational disruption, the need to investigate and contain the incident, potential regulatory notification duties, and reputational effects. Because the number of people affected is unknown and the precise data set is undisclosed, the full real-world impact cannot yet be measured from public sources alone.

What to do if you're exposed

If you have a past or present connection to frs-fnrs.be or the National Fund for Scientific Research, the following steps are prudent while public detail remains limited:

• Watch financial, email and professional accounts for unexpected activity or messages that reference funding or internal matters.
• Treat unsolicited requests for credentials, documents or payments with caution, even if they appear to come from familiar research contexts.
• Update passwords on related accounts and enable multi-factor authentication where it is offered.
• Look for any official notices or guidance issued directly by the organisation.
• Run a free exposure scan of your email address to check whether it has appeared in known breach data sets.

Further confirmed information, if released, should come from the organisation or competent authorities rather than from unverified third-party claims.

AICompiled with AI assistance from public sources and published under our editorial standards.