Lazy Boyz Says Cyberattack Led to Data Leak from File Servers

Summary
Lazy Boyz says it detected a cyberattack on September 3, disconnected some systems, and later learned data had leaked from its file servers. The company is investigating the scope and says it refused the attackers’ payment demand.
Key points
- Lazy Boyz says it detected an extensive cyberattack on the morning of September 3, 2026, and took immediate steps to limit its impact.
- The company disconnected some systems and later learned that data from its file servers had leaked onto the dark web.
- Lazy Boyz says it found a file containing a payment demand to unlock files and was presented with a very high demand, which it refused.
- The company says it has ended communication with the attackers and is working to determine how much data was leaked.
- Lazy Boyz is cooperating with Norway’s Kripos/NC3 and says it notified the Norwegian Data Protection Authority.
- The company says store operations are near normal while it works to reconstruct its servers.
Article Details
- Victim Organization
- Lazy Boyz AS
- Incident Type
- Cyberattack involving file encryption and data leakage
- Incident Date
- 2026-09-03
- Data Types Exposed
- Data from file servers; specific data types not disclosed
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- Certain systems were disconnected to contain the attack, and the company is reconstructing its servers. Store operations remain nearly normal.
- Ransom Or Extortion
- A ransom demand to unlock files was found, and attackers presented a very high demand during communications. Lazy Boyz AS declined to pay and ended contact.
- Claim Status
- confirmed
