Lockbit3 ransomware group lists perkinsmfg.com on its leak site

• Ransomware group: Lockbit3
• Country: United States
• Sector: Manufacturing
• Announcement date: February 8, 2024

The LockBit ransomware group has published a leak announcement claiming to have compromised data belonging to perkinsmfg.com. This announcement, appearing on the group's dedicated leak site, marks a significant escalation in the threat facing the organization.

Details of the claim

The LockBit group listed perkinsmfg.com on its leak site on February 8, 2024. According to the claims made by the threat actors, the organization's data will be published if their demands are not met. The group has demanded a ransom of 93,675 USD in exchange for not releasing the information.

The group's claim of an attack is dated February 8, 2024, coinciding with the date the announcement was made public on their platform. With the publication of this announcement, it is stated that the organization faces the threat of data exposure. Ransomware attacks of this nature often follow a pattern where attackers first infiltrate a network, exfiltrate sensitive information, and then threaten to release that data to pressure the victim into paying a ransom.

Data involved in the incident

Regarding the specifics of the breach, there is no specific information available regarding the content of the compromised or threatened data. The listing does not provide details on the volume or the nature of the files involved.

• No specific data types were named in the listing.

About Perkins Manufacturing

Perkins Manufacturing is an American company specializing in the design and production of waste containers, lifting systems, and related equipment for the waste management and recycling industry. Operating since the 1960s, the family-owned business is particularly known for its hydraulic lifting mechanisms for waste collection vehicles.

Impact and risk assessment

This incident may negatively impact the organization's operational continuity and commercial reputation. As a US-based entity, a potential data breach could trigger legal processes under state laws and federal regulations. The LockBit ransomware group, which has been active since 2019, is known for employing double-extortion tactics. In these scenarios, attackers do not just encrypt files to disrupt operations; they also steal data to use as leverage for extortion.

The potential publication of the organization's data may lead to risks such as identity theft or targeted phishing attacks for employees and customers. When sensitive information is leaked, it can be used by malicious actors to craft highly convincing social engineering campaigns, making it difficult for individuals to distinguish between legitimate communications and fraudulent ones.

For organizations operating in the manufacturing sector, maintaining robust cybersecurity postures is essential to mitigate such risks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for all staff members. Protecting the integrity of supply chains and ensuring the security of intellectual property are critical components of modern industrial defense strategies. As threat actors continue to target specialized manufacturing entities, the necessity for comprehensive incident response plans and adherence to regulatory standards becomes increasingly vital for maintaining business resilience.