LockBit 3.0 Ransomware Attack on CCI Aix-Marseille-Provence

Incident Date: May 09, 2024

Attack Overview
VICTIM
CCI Aix-Marseille-Provence
INDUSTRY
Organizations
LOCATION
France
ATTACKER
Lockbit
FIRST REPORTED
May 9, 2024

Ransomware Attack on CCI Aix-Marseille-Provence by LockBit 3.0

Company Profile

The Chamber of Commerce and Industry of Marseille Provence (CCIMP) is an organization that supports and promotes businesses in the Marseille Provence region of France. They provide a range of services to help businesses grow and succeed, including networking opportunities, business development support, and advocacy on behalf of the business community. The company is associated with numerous organizations like Euroméditerranée, the Port of Marseille Fos, and ITER, among others. CCIMP is a significant inward investment agency attracting between 60 and 80 companies annually. The company is located in the Greater Marseille Metropolitan Area.

Attack Details

The ransomware group LockBit 3.0 has claimed an attack on CCI Aix-Marseille-Provence, a significant inward investment agency in the Marseille Provence region. The attack targeted the company's systems, encrypting files, modifying filenames, and dropping a ransom note demanding payment for decryption. The advanced capabilities of LockBit 3.0 make it a dangerous threat to organizations, including those in critical infrastructure sectors.

Company Vulnerabilities

Due to the nature of their operations and the valuable services they provide to businesses in the Marseille Provence region, CCIMP may be targeted by threat actors seeking to disrupt their activities or extort ransom payments. Their involvement in various professional networks and partnerships could make them a prime target for cybercriminals looking to exploit vulnerabilities in their systems.

LockBit May Attacks

This is part of the May 2024 attacks by LockBit 3.0, a cybercriminal group that resurfaced with vigor following the disruption of its infrastructure in February during "Operation Cronos." Despite arrests and the dismantling of its data leak site, LockBit swiftly returned, targeting over 50 victims within hours of reactivating its platform. These assaults spanned various sectors and countries, showcasing LockBit's global reach and adaptability.

Sources:

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.