Security News > 2023 > February > LockBit ransomware gang claims Royal Mail cyberattack
The LockBit ransomware operation has claimed the cyberattack on UK's leading mail delivery service Royal Mail that forced the company to halt its international shipping services due to "Severe service disruption."
This comes after LockBitSupport, the ransomware gang public-facing representative, previously told BleepingComputer that the LockBit cybercrime group did not attack Royal Mail.
LockBitSupp failed to explain why printed Royal Mail ransom notes seen by BleepingComputer included links to LockBit's Tor negotiation and data leak sites rather than ones operated by another threat actor.
At the moment, the entry for the Royal Mail attack on LockBit's data leak site says stolen data will be published online on Thursday, February 9, at 03:42 AM UTC. Royal Mail first detected the attack on January 10 and hired outside forensic experts to help with the investigation.
"Incident was detected yesterday, UK/ domestic mail remains unaffected," a Royal Mail spokesperson told BleepingComputer on January 11 when we reached out for more details.
Royal Mail is yet to acknowledge that it's dealing with a ransomware attack that could likely lead to a data breach since LockBit ransomware operators are known for stealing data and leaking it online if their ransom demands are not met.
News URL
Related news
- Halliburton cyberattack linked to RansomHub ransomware gang (source)
- Police arrest four suspects linked to LockBit ransomware gang (source)
- LockBit Ransomware and Evil Corp Members Arrested and Sanctioned in Joint Global Effort (source)
- MoneyGram: No evidence ransomware is behind recent cyberattack (source)