Ransomware Attack on Pinnacle Plastic Products by Fog Group

Pinnacle Plastic Products, Inc., a leading manufacturer in the custom blow molding industry, has allegedly been targeted by a ransomware attack orchestrated by the infamous Fog ransomware group. The breach, identified on November 28, reportedly compromised 5.3 GB of sensitive data, including internal financial documents and personal information of customers and employees.

About Pinnacle Plastic Products

Situated in Bowling Green, Ohio, Pinnacle Plastic Products stands as a significant entity in the manufacturing sector, with a focus on custom blow molding. Since its establishment in 1996, the company has operated from a cutting-edge facility covering approximately 102,000 square feet, employing between 101 to 250 individuals. With annual revenues ranging from $25 million to $50 million, Pinnacle is noted for producing a wide array of high-quality plastic products for sectors such as automotive, medical, and consumer goods. Their dedication to quality and customer service, alongside advanced manufacturing techniques, sets them apart in a competitive market.

Attack Overview

The Fog ransomware group, recognized for its advanced attack strategies, has allegedly targeted Pinnacle Plastic Products by exploiting system vulnerabilities to gain unauthorized access. The breach has exposed critical data, including non-disclosure agreements, potentially revealing confidential business information. This incident poses significant risks to Pinnacle's operations and stakeholder trust, emphasizing the vulnerabilities that manufacturing companies face in the evolving cyber threat landscape.

Fog Ransomware Group

Fog ransomware, a variant of the STOP/DJVU family, has gained notoriety for its double extortion tactics, encrypting data and threatening to leak sensitive information if ransom demands are unmet. The group typically gains initial access through compromised VPN credentials or weak Remote Desktop Protocol configurations. Once inside, they employ tools like Cobalt Strike to escalate privileges and move laterally across networks. The attack on Pinnacle Plastic Products highlights the group's strategic shift towards targeting more lucrative industries beyond their traditional focus.