Lockbit3 lists cmmt.com.tw on leak site

• Ransomware group: Lockbit3
• Country: Taiwan
• Sector: Manufacturing
• Announcement date: January 22, 2024

Lockbit3 claims data breach against cmmt.com.tw

The Lockbit3 ransomware group has listed the Taiwan-based manufacturing company cmmt.com.tw on its dedicated leak site. This announcement marks a new target for the threat actor, which claims to have successfully compromised the organization's digital environment.

According to the group's post, the threat actors allege they have gained unauthorized access to the organization's networks. This intrusion has reportedly resulted in a data breach, according to the group's claims. The announcement was made on January 22, 2024, and notably includes a countdown timer, a common tactic used by ransomware groups to pressure victims into meeting specific demands before the promised publication of stolen information.

Details of the alleged incident

The Lockbit group added the domain cmmt.com.tw to its leak site on January 22, 2024, asserting that it would publish the organization's data. While the group claims to have conducted a data breach through network access, the specific details regarding the content of the leaked or threatened data have not been provided by the attackers.

The listing does not specify the volume of data involved or the specific file types targeted during the alleged intrusion. Consequently, the listing names no data types.

About cmmt.com.tw

CMMT (Chuan Maw Metal Technology) is a manufacturing company based in Taiwan. The organization specializes in metal processing and precision casting. Furthermore, the company is involved in the production of various components specifically designed for the automotive and industrial sectors.

Risk assessment and industry implications

This announcement by the Lockbit group may pose significant risks to the organization's operational continuity. Given that the organization operates within the manufacturing sector, there is a possibility of the disclosure of intellectual property or trade secrets. Such a leak could impact the company's competitive standing and proprietary processes.

Furthermore, the organization may face legal obligations under Taiwan's local data protection regulations following such an incident. If the leaked data were to include employee or customer information, risks such as secondary attacks and identity theft may be observed. Ransomware groups often use double extortion tactics, where they not only encrypt data but also threaten to leak sensitive information to maximize leverage over the victim.

LockBit is a ransomware group that has been tracked since 2019. It is reported that they have continued their operations despite an international intervention against their infrastructure in February 2024. For organizations in the manufacturing sector, maintaining robust security postures is essential to mitigate these risks. Common defensive steps include implementing strong access controls, maintaining regular offline backups, and monitoring network traffic for unusual activity to detect unauthorized access before data can be exfiltrated.