Lockbit3 ransomware group lists centuryaluminum.com on its leak site

• Ransomware group: Lockbit3
• Country: United States
• Sector: Manufacturing
• Announcement date: August 13, 2022

The LockBit ransomware group has listed centuryaluminum.com on its leak site. This announcement, made by the threat actors, claims that the organization has been targeted and that data belonging to the entity has been obtained by the group.

The details of the claim

On August 13, 2022, the LockBit group listed centuryaluminum.com on its leak platform. This announcement serves as a claim by the threat actors that they have successfully compromised the organization and obtained its data. At the time of the announcement, the group did not provide any specific data samples to support their claim, nor did they include any screenshots of the alleged leak to verify the breach.

In many ransomware scenarios, threat actors utilize leak sites to pressure victims into paying ransoms. This tactic is often part of a double extortion strategy, where attackers not only encrypt an organization's systems to disrupt operations but also threaten to publish sensitive information on public forums if their demands are not met. While the group has made this claim, the specific details regarding the nature of the incident remain limited to the listing itself.

Information regarding the alleged data

Regarding the content of the allegedly leaked data, there is currently no information available. The announcement did not specify the types of files that were targeted, nor did it provide any details regarding the volume of the data involved. Furthermore, the group has not issued any ransom demands in relation to this specific listing.

• The listing names no data types

About Century Aluminum

Century Aluminum is a publicly traded American company engaged in the production of primary aluminum. The company operates aluminum smelters and supplies aluminum products for various industries.

Risk assessment and sector implications

This incident may result in the exposure of the organization's sensitive data. If the data is published, it could lead to secondary risks such as identity theft or targeted phishing attacks against employees and business partners. Such secondary attacks often follow a breach, as stolen credentials or internal communications can be used to craft highly convincing social engineering campaigns.

LockBit is a Ransomware-as-a-Service (RaaS) group that has been tracked since 2019. The group reportedly resumed operations after its infrastructure was disrupted by an international operation in February 2024. The persistence of such groups highlights the ongoing challenge faced by various industries in defending against evolving ransomware threats.

The manufacturing sector, in which the organization operates, may be negatively impacted by such attacks in terms of operational continuity and intellectual property. For organizations in this sector, maintaining robust security postures is critical to protecting proprietary manufacturing processes and ensuring that production lines remain uninterrupted. Common defensive steps for organizations include implementing strict access controls, maintaining offline backups, and conducting regular security awareness training to mitigate the risk of initial access through phishing.