Lockbit3 claims data breach against FOSUN.COM

• Ransomware group: Lockbit3
• Country: China
• Sector: Financial Services
• Announcement date: August 9, 2022

LockBit3 claims to have compromised FOSUN.COM

The LockBit ransomware group has issued an announcement on its leak site claiming that it has successfully compromised data belonging to FOSUN.COM. This announcement, which appeared on August 9, 2022, suggests a targeted operation against the multinational conglomerate. While the claim has been made public by the threat actor, the details surrounding the incident remain limited to the group's initial assertion.

The details of the alleged attack

According to the post published by the LockBit group, the attackers allegedly gained unauthorized access to the networks belonging to FOSUN.COM. The group claims that during this unauthorized access, they were able to exfiltrate data from the institution's systems. Following the alleged theft, the group has issued threats to publish the acquired information on their platform.

Ransomware groups often employ a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to release confidential data publicly, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of sensitive information, which could lead to significant reputational and legal consequences.

Information regarding the leaked data

Despite the claims made by the LockBit group regarding the theft of information, the current listing provides no specific details regarding the nature or the scope of the allegedly leaked data. There is no information provided regarding the specific types of files, the total volume of data, or the total file count involved in the incident. Furthermore, no screenshots or detailed descriptions of the stolen content have been shared by the group at this time.

• No specific data types were named in the listing.

About FOSUN.COM

Fosun International Limited is a Chinese multinational conglomerate that operates across a wide variety of sectors. Its business interests include healthcare, intelligent manufacturing, consumption, and financial services. The organization maintains a diverse investment portfolio that spans multiple industries on a global scale.

Potential implications and organizational risks

This incident may present a significant risk of exposure for the institution's financial data or customer information. If a data breach has indeed occurred, it could trigger complex legal processes under the data protection regulations applicable to the institution's jurisdiction. The potential exposure of such data can create a foundation for various secondary threats, such as identity theft or highly targeted phishing attacks directed at the organization or its clients.

Considering the known tactics and methods of the LockBit group, it is possible that an organization's operational continuity could be negatively impacted by such an attack. While information regarding this specific group remains limited, their history suggests a focus on high-impact disruptions.

For organizations operating within the financial services sector, maintaining robust defensive postures is critical. Common defensive steps include implementing multi-factor authentication, maintaining rigorous patch management schedules to close vulnerabilities, and ensuring comprehensive network monitoring to detect unauthorized access. Additionally, regular data backups and a well-tested incident response plan are essential components for mitigating the impact of potential ransomware and data exfiltration events.