Lockbit3 ransomware group lists fec-corp.com on its leak site

• Ransomware group: Lockbit3
• Country: Thailand
• Sector: Manufacturing
• Announcement date: August 3, 2023

LockBit claims data compromise at Federal Electric Corp

The LockBit ransomware group has published an announcement on its leak site claiming that data belonging to the Thailand-based organization Federal Electric Corp., Ltd. (fec-corp.com) has been compromised. According to the group's post, which was added to their platform on August 2, 2023, the attackers intend to publish all available data belonging to the company. Following the initial announcement, the group has initiated a countdown process to increase pressure on the target.

Ransomware leak sites serve as a primary tool for cybercriminal groups to exert pressure on victims. These platforms are used to host announcements regarding successful breaches, often including countdown timers to create a sense of urgency. By threatening to release stolen information publicly, these groups aim to coerce organizations into paying ransoms to prevent the exposure of sensitive corporate or personal data.

Details regarding the alleged breach

The announcement provided by the LockBit group does not contain specific details regarding the nature or the specific type of the allegedly compromised data. Furthermore, the provided screenshots associated with the claim do not offer any additional information regarding the content of the breach. As a result, the specific categories of information that may have been accessed remain unknown at this time.

Affected data types

• No specific data types are named in the listing.

About Federal Electric Corp., Ltd.

Federal Electric Corp., Ltd. (FEC) is an established organization with a long history in the manufacturing sector. Established in 1978, the company serves as the exclusive sole manufacturer of SHARP-branded electric home appliances in Thailand.

Risk assessment and industry implications

This announcement by the LockBit group may pose significant risks to the operational continuity of Federal Electric Corp., Ltd. The group appears to be employing a double-extortion strategy, a common tactic where attackers not only encrypt an organization's systems but also steal sensitive data to use as leverage during negotiations. By threatening to publish the data, the group attempts to maximize the pressure on the institution.

Depending on the actual content of the allegedly compromised data, several secondary risks may emerge. These include the potential for identity theft or the execution of targeted phishing attacks directed at the organization's employees and customers. Furthermore, given the nature of the threat, the institution may face data breach notification obligations under Thailand's local data protection regulations.

In the manufacturing sector, such incidents can have broader consequences. The group's past activities suggest that these types of leaks may also create indirect effects on the supply chain, potentially impacting partners and distributors connected to the manufacturer. To mitigate such risks, organizations typically focus on robust data protection frameworks, continuous monitoring of network activity, and comprehensive incident response plans to manage the fallout of a potential data exposure.