Barnett Millworks targeted by Knight ransomware group

• Ransomware group: Knight
• Country: United States
• Sector: Manufacturing
• Announcement date: November 20, 2023

Knight ransomware group claims attack on Barnett Millworks

The ransomware group known as Knight has claimed responsibility for a cyberattack targeting Barnett Millworks. According to an announcement made on a leak site on November 20, 2023, the threat actors allege they have successfully compromised the organization's network and exfiltrated a significant volume of data.

The group claims that the attack occurred around November 14, 2023. According to the group's allegations, the network of Barnett Millworks has been locked and the organization's data has been encrypted. This type of activity is a hallmark of modern ransomware operations, where attackers aim to disrupt business operations by making critical files inaccessible to the rightful owners.

In addition to the encryption of systems, the Knight group alleges that they have exfiltrated approximately 350GB of data to their own servers. This tactic is part of a broader trend in cybercrime known as double extortion. In a double extortion scheme, attackers do not simply lock a victim's files; they also steal sensitive information before the encryption process begins. This allows the attackers to demand a ransom not only for the decryption of the systems but also to prevent the public release of the stolen data. By threatening to leak the information, the group increases the pressure on the organization to pay the ransom.

Details regarding the alleged data theft

While the group has made significant claims regarding the volume of data stolen, specific details regarding the contents of the leaked information remain unavailable. The group has not provided a detailed breakdown of the file types or the specific nature of the documents involved. The only evidence provided by the attackers was a screenshot displaying a security verification page, which offers no insight into the actual data content.

The listing names no specific data types that have been exfiltrated.

The organization profile

Barnett Millworks is a manufacturing company based in Mobile, Alabama. The company specializes in the design and production of custom doors, windows, and architectural millwork products.

Risk assessment and industry implications

Public information regarding the Knight group is currently limited, making it difficult to assess their full capabilities or typical patterns. However, the claims made by the group could lead to significant disruptions in the organization's operational processes and overall business continuity. When a manufacturing entity's network is locked, the ability to manage production, logistics, and supply chains can be severely compromised.

Depending on the nature of the alleged leaked data, secondary risks may arise. If employee or customer information is exposed, the organization could face risks such as identity theft. Such scenarios often require organizations to review their data security protocols and evaluate their notification obligations under relevant regulations in the event of a confirmed data breach.

For organizations operating in the manufacturing sector, such incidents highlight the importance of robust cybersecurity defenses. Common defensive steps for organizations include maintaining regular, offline backups to mitigate the impact of encryption, implementing strict access controls to limit lateral movement within a network, and conducting regular security audits. Furthermore, because double extortion relies on the threat of data exposure, organizations often focus on data loss prevention (DLP) strategies to detect and block the unauthorized transfer of sensitive information to external servers.