Security News > 2024 > January > Subway's data torpedoed by LockBit, ransomware gang claims
![Subway's data torpedoed by LockBit, ransomware gang claims](/static/build/img/news/subway-s-data-torpedoed-by-lockbit-ransomware-gang-claims-medium.jpg)
The LockBit ransomware gang is claiming an attack on submarine sandwich slinger Subway, alleging it has made off with a platter of data.
LockBit's post to its leak blog, published on January 21, suggests one of its affiliates breached Subway's database, stealing sensitive data on "All financial aspects" of the fast food franchise.
"We exfiltrated their SUBS internal system which includes hundreds of gigabytes of data and all financial [aspects] of the franchise, including employee salaries, franchise royalty payments, master franchise commission payments, restaurant turnovers etc," LockBit alleges.
The last line here suggests LockBit is giving Subway some time to mull the demands that it has almost certainly communicated to the company.
It's not clear whether ransomware was involved or if the criminals' claims are solely related to data theft and extortion, as ransomware gangs have been increasingly "Pivoting" to this in the last few years.
From intel gathered in 2023, LockBit established clear guidelines on ransom demands and how generous a discount its affiliates are allowed to offer before walking away from the table.
News URL
https://go.theregister.com/feed/www.theregister.com/2024/01/22/subways_data_toasted_by_lockbit/
Related news
- FBI recovers 7,000 LockBit keys, urges ransomware victims to reach out (source)
- FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims (source)
- Police arrest Conti and LockBit ransomware crypter specialist (source)
- Ukraine Police Arrest Suspect Linked to LockBit and Conti Ransomware Groups (source)
- Ransomware disrupts Indonesia’s national data centre, LockBit gang claims US Federal Reserve breach (source)
- Decryptor for DoNex, Muse, DarkRace, (fake) LockBit 3.0 ransomware released (source)
- Russians plead guilty to involvement in LockBit ransomware attacks (source)
- Two Russian Nationals Plead Guilty in LockBit Ransomware Attacks (source)