Lockbit3 claims data breach against fiamma.com.my

• Ransomware group: Lockbit3
• Country: Malaysia
• Sector: Retail & E-Commerce
• Announcement date: April 10, 2023

Lockbit3 claims a data breach against fiamma.com.my

The Lockbit3 ransomware group has listed the Malaysian organization fiamma.com.my on its dedicated leak site, alleging that the company has suffered a data breach. This announcement marks a significant escalation in the pressure placed upon the organization by the threat actor group.

Details of the alleged attack

According to the announcement made on April 10, 2023, the Lockbit3 group has added fiamma.com.my to its platform. The group is currently threatening to publish the institution's data to the public. To facilitate this threat, the attackers have demanded a ransom payment of 200,000 USD. The listing indicates that a countdown timer has been initiated, signaling a specific timeframe for the publication of the data if the demands are not met.

Information regarding the leaked data

At this stage of the incident, there is no specific information regarding the content of the leaked or threatened data. The group has not provided details regarding the volume of files or the specific types of information that have been compromised. The only information currently available is general information regarding the institution's operations.

About fiamma.com.my

Fiamma is a Malaysia-based company with over 40 years of experience in the distribution of home appliances. Its product range includes a wide variety of home electronics, ranging from cooking appliances to laundry machines, air conditioners, and refrigerators.

Analysis and potential impact

The Lockbit group is a structure known for its Ransomware-as-a-Service (RaaS) model, which has been active since 2019. In a RaaS model, developers provide the ransomware code to affiliates who then carry out the actual attacks, allowing the group to scale its operations significantly. The publication of the institution's data may lead to secondary risks such as the disclosure of customer and employee information.

Because the institution is based in Malaysia, it may face challenges regarding compliance with local data protection regulations following a breach of this nature. If the ransom is not paid, the public release of the data could result in reputational damage and expose the institution to targeted phishing attacks. Such attacks often use stolen information to deceive employees or customers into revealing further sensitive credentials.

It is worth noting that although the group's infrastructure was disrupted by international operations in 2024, its capacity to resume operations suggests that the threat remains persistent. Organizations in the retail and e-commerce sectors often face these types of threats due to the high value of consumer data they maintain. To mitigate such risks, organizations typically focus on robust backup strategies, multi-factor authentication, and continuous monitoring of their networks to detect unauthorized access before data exfiltration can occur.