Lockbit3 ransomware group lists udhaiyamdhall.com on its leak site

• Ransomware group: Lockbit3
• Country: India
• Sector: Agriculture and Food Production
• Announcement date: December 20, 2023

Lockbit3 claims a data breach against Shri Lakshmi Agro Foods Private Limited

The Lockbit3 ransomware group has officially listed Shri Lakshmi Agro Foods Private Limited on its dedicated leak site. Operating under the domain udhaiyamdhall.com, the organization has been targeted in a claimed data breach. This announcement, made on December 20, 2023, follows an alleged attack that took place on December 14, 2023. The threat actor group has initiated a countdown, a common tactic used in ransomware extortion, stating that the organization's data will be published if their demands are not met.

Ransomware leak sites serve as a platform for cybercriminal groups to exert pressure on victims through a method known as double extortion. In such scenarios, attackers do not merely encrypt a company's files to disrupt operations; they also steal sensitive information before the encryption process begins. By threatening to release this stolen data publicly, the attackers aim to maximize the psychological and financial pressure on the victim organization, hoping to coerce them into paying a ransom to prevent the exposure of proprietary or sensitive information.

Details of the claimed data theft

While the specific volume of data and the exact amount of the ransom demand remain unknown, the group has provided visual evidence to support their claims. The screenshots shared by the attackers appear to contain various documents that belong to the company's business operations. These samples suggest that the breach involves sensitive administrative and commercial documentation.

The documents identified in the leaked samples include:

• Commercial invoices
• Accounting records
• Stock data

The presence of such documents indicates that the attackers have gained access to the internal business processes of the organization, which can lead to significant operational and strategic complications.

About Shri Lakshmi Agro Foods Private Limited

Shri Lakshmi Agro Foods Private Limited is a prominent food processing company based in India. The organization maintains a significant presence in the food industry and has been active for many years. The company operates a state-of-the-art processing facility located in the Thiruvotriyur region of Chennai, serving as a key player in its sector.

Risk assessment and implications

Lockbit is a Ransomware-as-a-Service (RaaS) group that has been active since 2019. Despite facing international disruptions, reports indicate that the group resumed its operations in February 2024. The potential leak of data from an organization like Shri Lakshmi Agro Foods Private Limited carries several critical risks.

One primary concern is the exposure of trade secrets, which could undermine the company's competitive advantage. Furthermore, the leaked information could expose supply chain partners to targeted phishing attacks. When attackers possess commercial invoices and contact details, they can craft highly convincing fraudulent communications to deceive business partners, potentially leading to further financial losses across the supply chain.

From a regulatory perspective, the organization may face notification obligations toward its customers and business partners under Indian data protection regulations. Beyond legal compliance, the incident poses a significant threat to the organization's reputation and could create secondary risks for all stakeholders involved in their business ecosystem.

To mitigate such risks, organizations in the food production and agriculture sectors should prioritize robust defensive measures. This includes implementing multi-factor authentication, maintaining regular offline backups, and conducting thorough employee training to recognize phishing attempts. Continuous monitoring of network traffic and strict access controls are also essential components of a modern cybersecurity posture designed to defend against sophisticated RaaS groups.