Lockbit3 ransomware group lists biosonicsinc.com on its leak site

• Ransomware group: Lockbit3
• Country: United States
• Sector: Manufacturing
• Announcement date: February 2, 2023

LockBit3 claims to have stolen data from BioSonics

The LockBit ransomware group has listed BioSonics on its dedicated leak site, claiming to have successfully compromised the organization's network. This announcement, made on February 2, 2023, indicates a potential data breach involving the United States-based manufacturing firm. The group has issued a notice regarding the potential publication of the stolen information, a common tactic used in modern cyber extortion campaigns.

Ransomware groups often utilize leak sites to exert pressure on their victims. In these scenarios, attackers typically employ a double extortion strategy. This method involves not only encrypting an organization's systems to disrupt operations but also exfiltrating sensitive data. The threat of leaking this data publicly serves as a secondary lever to coerce the victim into paying a ransom. By hosting a public list of victims, the group increases the visibility of the breach, aiming to maximize the reputational and operational pressure placed upon the target organization.

Details of the alleged breach

According to the post on the LockBit3 leak site, the group alleges that they have obtained a significant amount of information from the organization's network. The group claims that the total volume of the compromised data is 228 GB. This information was announced on the same day as the claimed attack date, which is February 2, 2023.

Despite the specific claim regarding the total size of the data, the leak site entry remains relatively vague regarding the specific nature of the files. The listing does not provide a detailed breakdown or any screenshots that would clarify the specific content of the files involved in this incident. Furthermore, no specific information was provided regarding the total file count or the specific ransom demand requested by the attackers.

About BioSonics

BioSonics is a technology company that has been developing and manufacturing aquatic ecosystem monitoring systems since 1978. The company provides sonar-based equipment that delivers critical data for environmental monitoring and research projects. As a player in the manufacturing sector, the company's operations rely on technical expertise and the production of specialized equipment for environmental research.

Potential impacts and security implications

The alleged breach suggests that the organization may face significant risks concerning the exposure of operational data and intellectual property. If the stolen data is eventually published by the threat actors, it could lead to targeted phishing attacks against employees and business partners. Such attacks often leverage stolen information to gain further access to corporate networks or to conduct fraudulent activities under the guise of a trusted entity.

The LockBit group has been active since 2019 as a Ransomware-as-a-Service (RaaS) operation. While international efforts were made to disrupt its infrastructure in February 2024, it has been reported that the group has resumed operations. This persistence highlights the ongoing challenge posed by sophisticated RaaS models that provide specialized tools to various affiliates.

For organizations in the manufacturing and technology sectors, such incidents often carry significant weight. Depending on the specific sector and the nature of the data involved, the organization may face legal obligations under relevant data protection regulations. To mitigate such risks, organizations typically focus on defensive measures such as implementing robust network segmentation, maintaining rigorous backup protocols, and conducting regular employee training to recognize social engineering attempts. Strengthening identity and access management is also a critical component in defending against the types of unauthorized access claimed in these types of breaches.