Ondozabal Group Hit by LockBit 3.0 Ransomware
Ransomware Attack on Ondozabal Group by LockBit 3.0
Attack Details
During the ransomware attack on ondozabal.com, LockBit 3.0 managed to exfiltrate 181 GB of data, including sensitive information like confidential agreements, personal data, and contracts. The attackers demanded a ransom, although the specific amount was not disclosed. The leaked data sample underscored the severity and extent of the breach, highlighting the impact on Ondozabal Group's operations and reputation.
Victim Profile
The victim of a recent cyberattack was the Ondozabal Group, a Spanish machinery company specializing in high-precision industrial mechanics and large-scale machining. With over 80 years of experience, the company offers integrated services such as CNC machining, metalworking, and machining of extra-large parts weighing up to 50 tons.
Company Size and Industry Standing
The Ondozabal Group falls within the range of 51-200 employees, showcasing its status as a mid-sized enterprise in the manufacturing sector. The company has diversified its activities across key sectors like aerospace, wind energy, steel, presses, and oil & gas, positioning itself as a versatile player in the industry.
Vulnerabilities and Targeting
Due to its advanced operations and use of sophisticated software like NX Siemens CAM and SolidWorks, Ondozabal Group's interconnected systems, including ERP & MRP and industrial communication software, presented vulnerabilities that were exploited by threat actors. The company's extensive data connectivity and control over production processes made it an attractive target for cybercriminals seeking to disrupt operations and extort ransom.
LockBit 3.0 Ransomware Group
The LockBit 3.0 ransomware group, also known as LockBit Black, is a Ransomware-as-a-Service (RaaS) entity that has evolved from previous LockBit versions. Notable for its advanced encryption techniques, obfuscation, and lateral movement capabilities within networks, LockBit 3.0 has targeted a wide range of organizations globally, including major companies like Boeing and ICBC.
Sources:
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!