Lockbit3 ransomware group lists tiger.jp on its leak site

• Ransomware group: Lockbit3
• Country: Japan
• Sector: Manufacturing
• Announcement date: April 24, 2023

LockBit group targets Tiger Corporation

The LockBit ransomware group has officially listed the Japanese manufacturing company tiger.jp on its dedicated leak platform. This announcement, made on April 24, 2023, marks a significant escalation in the pressure being applied to the organization. According to the group's claims, the institution is being targeted as part of their ongoing extortion activities.

The listing appeared on the group's leak site with a specific intent to intimidate the victim. At the time the announcement was made, a countdown timer was observed on the platform, indicating a scheduled time for the release of the alleged stolen information. This tactic is a common feature of modern ransomware operations, designed to create a sense of urgency and panic within the target organization.

Claims and event details

The event involves the LockBit group claiming responsibility for the targeting of tiger.jp. The group has stated their intention to publish the institution's data if their demands are not met. While the group has initiated this public pressure, the specific details regarding the content of the data they claim to have accessed remain undisclosed at this time.

Regarding the specific types of information involved in this incident, the listing names no data types.

About Tiger Corporation

Tiger Corporation is a prominent Japanese manufacturer that specializes in the application of vacuum insulation and heat control technology to various consumer electronic appliances. The company is well-known for its expertise in producing vacuum flasks and a variety of kitchen appliances.

Risk assessment and implications

This situation indicates that the institution's operational processes and sensitive data may be at risk. If the data is leaked, negative impacts on the institution's intellectual property rights and trade secrets could be observed. Such a breach of proprietary information can undermine a company's competitive advantage and long-term strategic goals.

Furthermore, the disclosure of employee or customer data could bring about secondary risks such as identity theft and phishing attacks for the individuals involved. When personal information is exposed, individuals often face increased vulnerability to social engineering tactics where attackers impersonate trusted entities to gain further access or financial assets.

Under Japan's Act on the Protection of Personal Information (APPI), the institution may face legal obligations. Organizations operating within this regulatory framework must navigate complex compliance requirements following a potential data exposure. Given the past activities of the LockBit group, it is assessed that they are attempting to exert pressure on the institution through double extortion methods.

Double extortion is a strategy where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to release this data publicly, the attackers aim to force the victim into paying a ransom to prevent reputational damage or regulatory penalties. To defend against such threats, organizations typically focus on robust data encryption, strict access controls, and comprehensive monitoring of their network environments to detect unauthorized data exfiltration early in the attack lifecycle.