LockBit 3.0 Ransomware Attack on Elements Ingenieries

Incident Date: May 09, 2024

Attack Overview
VICTIM
Elements Ingenieries
INDUSTRY
Energy, Utilities & Waste
LOCATION
France
ATTACKER
Lockbit
FIRST REPORTED
May 9, 2024

Ransomware Attack on Elements Ingenieries by LockBit 3.0

Victim Profile

Elements Ingenieries, formerly known as RFR éléments, is a well-established player in the fields of environment, energy, and fluids. Founded in 2004, the company focuses on developing excellent engineering solutions for constructing energy-efficient and technically reliable buildings that are adaptable to new contexts, emphasizing resilience in their projects.

Company Standout

Elements Ingenieries stands out for its commitment to environmental sustainability and the urgent need for ecological transition. The company views each project as an opportunity to excel in engineering, creating buildings that are not only energy-efficient but also adaptable and resilient to future challenges.

Attack Details

Elements Ingenieries was targeted by the LockBit 3.0 cybercrime group in a ransomware attack. The attackers exfiltrated 73 GB of data, including financial records, employees' data, invoices, and likely other sensitive information. While no specific ransom demand was issued, the attackers leaked a sample of the exfiltrated data, posing a significant threat to the company's operations and reputation.

Vulnerabilities

The company, being a recognized actor in the fields of environment, energy, and fluids, may have been targeted by threat actors due to the sensitive nature of their work. Their focus on ecological transitions and sustainable engineering solutions could make them a prime target for cybercriminals looking to exploit valuable data.

LockBit May Attacks

This is part of the May 2024 attacks by LockBit 3.0, a cybercriminal group that resurfaced with vigor following the disruption of its infrastructure in February during "Operation Cronos." Despite arrests and the dismantling of its data leak site, LockBit swiftly returned, targeting over 50 victims within hours of reactivating its platform. These assaults spanned various sectors and countries, showcasing LockBit's global reach and adaptability. The group's resurgence prompts scrutiny of law enforcement's effectiveness in combating cybercrime and highlights the necessity for enhanced international cooperation to tackle such syndicates effectively.

Sources:

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.