``LockBit'', which seems to have hacked Nagoya Port, announced that it has now hacked Boeing and leaked 50GB of data



LockBit, the ransomware group that hacked Boeing in October 2023, has released approximately 50GB of confidential data on an online forum, claiming that Boeing did not pay the ransom.

LockBit leaks Boeing files after failed ransom negotiations • The Register

https://www.theregister.com/2023/11/10/lockbit_leaks_boeing_files/

Boeing breach: LockBit leaks 50 GB of data | Cybernews
https://cybernews.com/news/boeing-data-leak-lockbit-ransomware/

On October 28, 2023, it was pointed out that Boeing, an aerospace equipment developer, may have been hacked by LockBit. LockBit said it had 'obtained a huge amount of sensitive data' and threatened to release the data online if Boeing did not pay the ransom by November 2nd. In fact, some data was made public, and Boeing publicly acknowledged that there had been a security breach on November 2nd.




Boeing apparently did not pay the ransom, and LockBit released all of the data, about 50GB of data, saying the request was denied. According to Cybernews, which investigated the data, the majority of the data appears to be various backups.



Specifically, the company's training materials, a list of technology suppliers including their names, locations, and phone numbers, a strategy document issued in 2018, Boeing's projections for pilot needs through 2027, and sales. Financial details with high or poor quality costs, folders named ``Hazardous Waste'' and ``Rotorcraft.''



A researcher who reviewed the data noted that ``the data is extremely general and appears to be highly sensitive but not important.''



In response to the data breach, Boeing said: 'We believe this incident does not pose a threat to aircraft or flight safety. We are actively investigating the incident and working with law enforcement and regulatory authorities.' said.

The LockBit group is a Russian-based hacker group that first appeared at the end of 2019. Since then, it has been implicated in the system breaches of major Chinese bank ICBC and the Port of Nagoya , and is said to have carried out more than 1,400 attacks on victims around the world.

LockBit itself has suffered cyberattacks in the past, and it is known that in August 2022, it was forced to temporarily close its site due to a DDoS attack.

A site that publishes data stolen from companies is closed due to a mysterious DDoS attack, and the attacker also sends a message saying, ``Delete the data, you bastard.'' - GIGAZINE



in Security, Posted by log1p_kr