Ransomware Attack on J.D. International Lighting by Sarcoma Group

J.D. International Lighting, a well-established American wholesale lighting distributor, has allegedly been targeted by a ransomware attack orchestrated by the Sarcoma group. The breach, discovered on January 16, 2025, involved the exfiltration of 76 GB of sensitive data, though the specific nature of the compromised information remains undisclosed. This incident underscores the persistent threat posed by ransomware groups to businesses across various sectors.

Company Profile and Industry Standing

Founded in 1986, J.D. International Lighting operates from its headquarters in Pompano Beach, Florida. The company, with an annual revenue between $5-10 million, employs 11-50 people and specializes in the distribution of a wide range of lighting products, including fluorescent, incandescent, HID, halogen, CFL, and LED bulbs. With five distribution centers across the United States, J.D. International Lighting is a key player in the wholesale lighting industry, known for its extensive product range and nationwide reach.

Vulnerabilities and Attack Overview

The attack on J.D. International Lighting highlights the vulnerabilities that mid-sized companies face in the digital age. Despite its industry standing, the company's relatively small size and limited resources may have contributed to its susceptibility to cyber threats. The Sarcoma group, known for its aggressive tactics, likely exploited these vulnerabilities to infiltrate the company's systems and exfiltrate data.

Sarcoma Ransomware Group Tactics

Sarcoma, a ransomware group that emerged in late 2024, has quickly established itself as a formidable threat in the cybercrime landscape. The group employs a double extortion model, encrypting victims' data and threatening to leak it if ransom demands are not met. Sarcoma distinguishes itself by targeting supply chains and leveraging strong encryption methods, making data recovery challenging without payment. The group's operations have impacted various sectors globally, including healthcare, manufacturing, and finance.

Sources

• Ransomware.live
• JD International Lighting Company Profile - CIENCE
• New Ransomware Group Sarcoma Targets Australian Companies - Australian Cyber Security Magazine
• Threat Intelligence Report - Red Piranha
• Weekly Intelligence Report - Cyfirma