Lockbit3 claims data breach against cxm.com

• Ransomware group: Lockbit3
• Country: United States
• Sector: Technology
• Announcement date: February 4, 2024

Lockbit3 claims data theft from cxm.com

The LockBit ransomware group has published a notice on its dedicated leak site claiming to have exfiltrated data belonging to cxm.com, also known as Chicago Extruded Metals. This announcement, made on February 4, 2024, follows a pattern of double extortion often utilized by ransomware-as-a-service (RaaS) operators, where stolen data is threatened with public release to pressure victims into paying ransoms.

According to the claims made by the threat actor, the breach occurred on February 4, 2024. The group alleges that they successfully gained unauthorized access to various sensitive internal systems within the organization. The attackers claim to have compromised critical information repositories, including the company's financial records, detailed employee information, and extensive client databases. Furthermore, the group asserts that the breach extends beyond administrative files to include operational documents and sensitive laboratory test results.

Details of the alleged data exposure

The information allegedly stolen by the LockBit group is diverse, spanning administrative, financial, and technical domains. The group claims to have obtained a wide array of documentation that could be used for various malicious purposes, such as identity theft or corporate espionage. Based on the group's announcement, the leaked data is said to include the following items:

• Financial reports, budget, and tax documents
• Personal employee data and contracts
• Client contact information
• Project drawings
• Laboratory test results

The group has not provided specific details regarding the total volume of the data stolen or the specific file count involved in the incident. Additionally, there has been no information provided regarding a specific ransom demand or the organization's response to the claim.

About Chicago Extruded Metals

Chicago Extruded Metals, operating under the domain cxm.com, is a company situated in the United States. The organization operates within the technology sector, specifically specializing in the metal extrusion and manufacturing industry. The company is known for its expertise in the production and supply of various metal components designed for a wide range of industrial applications.

Potential impact and industry implications

The exposure of such sensitive information carries significant risks for both the organization and the individuals involved. For the employees and clients whose data was allegedly stolen, the breach poses secondary risks, including the potential for identity theft and highly targeted phishing attacks. Such attacks often leverage the stolen personal information to gain further access to systems or to defraud individuals.

Because the organization is based in the United States, this incident may lead to legal consequences under various state-level data protection laws and specific sectoral regulations. The exposure of trade secrets, such as project drawings and laboratory test results, can lead to severe reputational damage and significant operational disruptions for a manufacturing entity.

The LockBit group, which has been active since 2019, is a known RaaS entity. While its infrastructure faced disruptions due to international law enforcement operations in February 2024, reports indicate that the group has since resumed its operations. This highlights the persistent nature of such threat actors.

In the manufacturing and technology sectors, organizations often implement defensive measures to mitigate these risks. These typically include robust access controls, encryption of sensitive data at rest and in transit, regular security awareness training for employees to prevent phishing, and comprehensive monitoring of network activity to detect unauthorized access early. Protecting intellectual property, such as technical drawings and test results, remains a critical priority for maintaining competitive advantages and operational integrity.