Airspan Networks listed on Ragnar Locker leak site

• Ransomware group: Ragnar Locker
• Country: United States
• Sector: Technology
• Announcement date: January 25, 2022

The Ragnar Locker ransomware group has listed Airspan Networks on its dedicated leak site. According to the announcement made by the threat actor, the group claims to have successfully gained access to the organization's networks and performed a data exfiltration operation.

The claimed attack and event details

The incident was officially announced on the Ragnar Locker leak site on January 25, 2022. The group's announcement serves as a direct threat to the organization's operations within the technology sector. By listing the company on their platform, the threat actors are signaling that they have breached the perimeter and moved into the data exfiltration phase of their operation.

Ransomware groups often utilize leak sites to increase pressure on their targets. These sites act as a public gallery where victims are named to coerce them into paying a ransom. In this specific case, the group claims to have successfully navigated the target's network to extract information, though the specifics of the intrusion method remain undisclosed.

Data involvement and content

Regarding the specifics of the breach, there are currently no details or screenshots available regarding the content of the leaked data. The listing does not specify the volume of information or the specific types of files that were allegedly targeted during the intrusion.

• The listing names no specific data types.

Because no information has been provided regarding the exact nature of the files, the full scope of the potential exposure remains unknown at this time. There is no confirmation regarding the total size of the data or the specific file count involved in the alleged theft.

About Airspan Networks

Airspan Networks is a telecommunications equipment manufacturer specializing in radio access network (RAN) technologies. The company is involved in developing both hardware and software solutions specifically designed for 5G networks. Their technological output provides innovative connectivity solutions to a wide range of clients, including mobile operators and private networks on a global scale.

Implications and industry context

This incident may indicate potential vulnerabilities in the organization's data security processes. Until the content of the leaked data is clarified, there may be a risk of exposure for employee or customer information. The Ragnar Locker group is known for employing a double-extortion strategy, a tactic where attackers exfiltrate sensitive data before initiating the encryption of files. This method ensures that even if an organization can restore systems from backups, the threat actors can still demand payment by threatening to release the stolen information publicly.

Such incidents can lead to significant legal proceedings under data protection regulations in the regions where the organization operates. For companies operating within the technology and telecommunications sectors, maintaining robust security postures is critical due to the sensitive nature of the connectivity solutions they provide. Organizations in this sector often focus on securing their supply chains and protecting the intellectual property related to network hardware and software. While information regarding the Ragnar Locker group remains limited, their use of double extortion highlights the evolving complexity of modern ransomware threats.