Digipwr.com listed on Lockbit3 ransomware leak site

• Ransomware group: Lockbit3
• Country: United States
• Sector: Technology
• Announcement date: January 18, 2024

Lockbit3 claims data compromise of digipwr.com

The Lockbit3 ransomware group has listed digipwr.com on its dedicated leak site, claiming to have successfully compromised the organization's data. This announcement, made on January 18, 2024, marks a significant escalation in the threat posed to the company by the ransomware group. By listing a target on a leak site, ransomware actors typically employ a double extortion tactic, where they not only encrypt an organization's systems but also threaten to publish sensitive information to pressure the victim into paying a ransom.

According to the information provided by the group, the incident was officially announced on January 18, 2024, which coincides with the claimed date of the attack. The group has initiated a countdown timer on their site, a common psychological tactic used by ransomware operators to increase pressure on the victim. This countdown indicates the group's intention to publish the organization's data publicly if their demands are not met. While the group has made these claims, the specific details regarding the total volume of data stolen or the exact ransom amount demanded have not been disclosed in the public announcement.

Details of the claimed data breach

The Lockbit3 group has provided screenshots as evidence of the breach. These visual samples appear to contain various documents that are directly related to the company's internal operations and commercial activities. Based on the available information, the leaked content includes documentation that provides insight into the organization's business dealings and logistical management.

The specific types of information identified as being affected by this incident include:

• Commercial agreements
• Inventory records

The presence of such documents suggests that the breach may expose sensitive operational details that are critical to the company's day-to-day business functions and its relationships with external partners.

About digipwr.com

Digital Power is a technology company that specializes in the design and supply of power supply solutions. The company serves a diverse range of critical markets, including the medical, industrial, telecommunications, and defense sectors. Digital Power is recognized within the industry for its commitment to providing high-quality and innovative power products tailored to these specialized fields.

Impact and assessment of the incident

This incident carries the potential for significant consequences, as the exposure of sensitive commercial and operational data can disrupt business processes and damage professional reputations. Because the organization is based in the United States, a confirmed data breach of this nature could trigger complex legal processes governed by various state laws and federal regulations regarding data protection and privacy.

Furthermore, the nature of the data involved suggests that supply chain partners may also be negatively impacted by this situation. When a technology provider in the medical or defense sectors is compromised, the ripple effects can extend to the many organizations that rely on their products and services. There is also a notable risk that the leaked data could be utilized by the threat actors for secondary attacks, such as highly targeted phishing campaigns aimed at employees or business associates.

The Lockbit3 group has demonstrated significant resilience, having remained active since 2019. Notably, the group has continued its operations despite facing operational disruptions in February 2024. For organizations operating in the technology and critical infrastructure sectors, maintaining robust defensive postures is essential. This includes implementing strict access controls, conducting regular security audits, and ensuring that supply chain partners adhere to high cybersecurity standards to mitigate the risk of such devastating breaches.