Lightspeed Networks Ltd Targeted by Play Ransomware Group

Victim Profile

Lightspeed Networks Ltd, a medium-sized company operating in the Telecommunications sector, with a focus on providing fiber-optic bandwidth infrastructure services in the Pacific Northwest. LS Networks is an internet service provider catering rural areas with less than 100 staff & has around $55 M in revenue. Lightspeed Networks Ltd was incorporated on 2 September 2013.

Industry Standing

The telecommunications company stands out in the industry for its high-performance, dedicated connectivity fiber network that consistently performs and avoids oversubscription, with a service availability of 99.99%. The company's wide range of services includes internet service provision, unified communications, ethernet networks, and managed services. Notable customers include INSITU, Bend Parks and Recreation District, and Medford Radiology Group. This latter is an Oregon radiology practice that suffered a significant ransomware attack which received media coverage back in late May 2023.

Vulnerabilities

After months of weak performance against other compeeting companies in the same sector, Lightspeed Networks Ltd may have been targeted by threat actors like the Play Ransomware group due to known vulnerabilities involving gaining initial access through valid accounts. Play Ransomware actors exfiltrate data using tools like WinRAR and WinSCP, encrypting files with AES-RSA hybrid encryption.

Sources:

Lightspeed Networks Ltd Website

Endole - Lightspeed Networks Ltd Company Profile

IC3 - Play Ransomware Tactics

Proven Data - Play Ransomware Overview

Medford Radiology Group victims of cybersecurity event - KOBI-TV NBC5