Ransomware Hits Mar-Bal Exposing Data Vulnerabilities
Ransomware Attack on Mar-Bal: A Closer Look at the Fog Group's Latest Target
Mar-Bal, Inc., a leading manufacturer in the thermoset composite materials industry, has recently fallen victim to a ransomware attack by the notorious Fog group. This incident highlights the growing threat of ransomware attacks on the manufacturing sector, particularly those companies that are leaders in innovation and quality.
About Mar-Bal, Inc.
Founded in 1970 and headquartered in Chagrin Falls, Ohio, Mar-Bal specializes in producing bulk molding compounds (BMC) and sheet molding compounds (SMC). The company is recognized for its commitment to quality and customer-centric solutions, operating under an ISO 9001:2015 certification. With facilities in Ohio, Virginia, Missouri, and China, Mar-Bal employs approximately 450 people and generates annual sales of around $70 million. Its vertical integration and R&D center have positioned it as a leader in the composites industry.
Details of the Attack
The Fog ransomware group managed to infiltrate Mar-Bal's systems, compromising 37 GB of data. The breach exposed sensitive information, including personal contact data, Social Security Numbers, and driver licenses. This exposure poses significant risks to the individuals affected and underscores the vulnerabilities that even well-established companies face in the digital age.
Fog Ransomware Group
Fog ransomware, a variant of the STOP/DJVU family, is known for its disruptive capabilities, encrypting files and demanding ransom payments in Bitcoin. The group has evolved since its identification in November 2021, targeting sectors such as education, healthcare, and finance. Fog ransomware distinguishes itself through its rapid encryption capabilities and sophisticated infiltration techniques, often exploiting compromised VPN credentials or known application vulnerabilities.
Potential Vulnerabilities
Mar-Bal's extensive digital infrastructure, necessary for its advanced manufacturing processes and international operations, may have presented opportunities for the Fog group to exploit. The attack highlights the importance of cybersecurity measures, particularly for companies with significant data assets and a global presence.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!