Ransomware Group Leaks Files Allegedly Stolen From Boeing

The notorious LockBit ransomware group has leaked gigabytes of files allegedly stolen from the systems of aerospace giant Boeing.

LockBit recently named Boeing on its leak website, claiming that “a tremendous amount of sensitive data” has been stolen, but later removed the company from its site, saying that negotiations had started.

Boeing was later once again added to the LockBit website and data allegedly stolen from its systems has now been leaked, indicating that the company has refused to pay a ransom. Over 40 Gb worth of archive and backup files are available for download.

Boeing has confirmed that parts of its distribution business have been hit by a cyberattack. The aerospace giant is aware that a ransomware group has released information allegedly taken from its systems, but it has yet to share any information on the scope of the potential data breach.

The company has reiterated that the cyber incident does not pose a threat to aircraft or flight safety.

The MalwareHunterTeam research group noted that many of the files appear to be associated with Aviall, a Boeing-owned aviation and aerospace component manufacturing company. Boeing acquired Aviall in 2006 and announced plans to retire the brand in 2020.

“Question is how much the networks of the companies got merged in the past 17 years. Because if not too much and LockBit really only pwned the networks of Aviall, the problem is not very much bad, ‘simply’ bad for Boeing. But 17 years is a lot, so…,” MalwareHunterTeam wrote on X, formerly Twitter.

LockBit has been one of the most active ransomware groups, targeting organizations in various sectors and countries.

According to a report authored earlier this year by government agencies in North America, Europe, and Australasia, the group received $91 million in ransom payments from US organizations alone.

Advertisement. Scroll to continue reading.

https://www.securityweek.com/ransomware-group-leaks-files-allegedly-stolen-from-boeing/