interfashion.it Listed by lockbit3 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People connected to Interfashion — employees, suppliers, partners or customers — face the practical risk that internal company files may have been taken and could be misused. On 24 March 2024 the organisation interfashion.it was listed by the ransomware group lockbit3, which claimed that internal files had been exfiltrated. The number of people affected remains unknown, and public detail about the precise contents of those files is limited. For anyone whose details sit inside a fashion design, production or distribution firm, that uncertainty itself is the immediate concern: contact information, contracts or operational records could surface later in ways that enable phishing, fraud or unwanted contact.

This article sets out only what has been reported, places the claim in context, and outlines the concrete steps individuals can take while fuller information is still missing.

Inside the incident

Public reporting states that interfashion.it was listed by the lockbit3 ransomware group on 24 March 2024. The group claims that internal files were exfiltrated in a ransomware attack. No further technical details — such as the initial access method, the exact date of intrusion, the volume of data taken, or any ransom demand — have been disclosed in the available record. The number of people affected is listed as unknown. Because the listing originates from the threat actor’s own site, it remains an unverified claim unless independently confirmed by the organisation or by forensic investigators. At present, the only firm public facts are the listing date, the organisation named, and the assertion that internal files were removed.

Who is lockbit3?

Lockbit3 is a well-documented ransomware operation that has operated for several years under the broader LockBit brand. Like many modern ransomware groups, it typically employs a double-extortion model: encrypting systems to disrupt operations while also copying data and threatening to publish it if a ransom is not paid. The group maintains a dark-web leak site where it posts victim names and, in some cases, sample files or full archives. It has targeted organisations across many sectors and countries, often advertising its tools through affiliate programmes that allow other criminals to deploy the ransomware in exchange for a share of any payment. Public reporting has linked LockBit variants to numerous high-profile incidents, though each listing must be treated as a claim by the group rather than as independently verified fact. In this case, lockbit3’s listing of interfashion.it asserts that internal files were exfiltrated; no additional statements by the group about this specific victim appear in the provided record.

About interfashion.it

Interfashion is an Italian company founded in 1992 and based in Rimini. In March 2023 it was acquired by STRAVA S.r.l. The firm works in design, production and distribution of fashion brands; over the years it has produced labels including Marithè+François Girbaud, GGigli and I’m Isola Mar. Companies of this type routinely hold design files, supplier contracts, production schedules, wholesale and retail customer lists, employee records and financial documents. Because fashion supply chains are international and often involve multiple partners, a breach at such an organisation can affect not only staff but also designers, manufacturers, distributors and retailers who exchange data with the firm. The acquisition by STRAVA S.r.l. in 2023 means that some systems or records may also touch the parent company’s environment, though no public confirmation of that linkage in the incident has been provided.

What data was at risk

The available facts state only that “internal files” were exfiltrated in a ransomware attack. No inventory of specific data types — such as names, email addresses, financial details, design intellectual property or employee records — has been published. Organisations in fashion design, production and distribution typically store a range of sensitive material: personal data of employees and contractors, commercial contracts, pricing information, customer and supplier contact lists, and proprietary design files. Whether any of those categories were among the files taken remains unconfirmed. Readers should therefore treat the exact contents as undisclosed and avoid assuming that particular data elements were or were not exposed.

Why it matters

For individuals, the main risks are secondary misuse of any personal or contact information that may have been present in the internal files. Phishing emails that appear to come from Interfashion or its partners, fraudulent invoices, or social-engineering attempts that reference real commercial relationships become more plausible once internal documents are in criminal hands. Even if no personal data is later confirmed, the mere existence of a public listing can prompt opportunistic scams that exploit the news itself. For the organisation, the incident raises operational and reputational questions: possible disruption from encryption, the cost of investigation and remediation, and the need to notify partners or regulators under applicable data-protection rules. Because the scale and precise contents remain unknown, both the company and any affected parties are left managing uncertainty rather than a fully mapped exposure.

Were you affected?

If you have worked with, supplied, or been employed by Interfashion or its related brands, treat any unexpected email, call or invoice that references the company with caution. Change passwords on accounts that may have been used in company systems, enable multi-factor authentication where available, and monitor financial statements for unusual activity. Keep records of any suspicious contact. Because the number of people affected and the exact data taken are still unconfirmed, the most practical next step is to check whether your own email address has already appeared in known breach data sets. Free exposure-scan tools can perform that check quickly and without cost, giving you an early indication of whether your information has surfaced elsewhere. Continue to watch for official statements from Interfashion or STRAVA S.r.l. for any Reported Details or guidance.

AICompiled with AI assistance from public sources and published under our editorial standards.