Security News > 2024 > June > Ransomware disrupts Indonesia’s national data centre, LockBit gang claims US Federal Reserve breach
Ransomware attackers wielding a LockBit variant dubbed Brain Cipher have disrupted a temporary national data center facility which supports the operations of 200+ Indonesian government agencies and public services.
Indonesia is working on creating four national data centers to support digital government efforts.
In the meantime, two temporary national data centers - one in Jakarta and the other one in Surabaya - have been stood up.
The National Cyber and Crypto Agency, the Communications Ministry, the cyber crime department of the Indonesian National Police and Telkom Indonesia with the help of two IT companies are investigating the breach.
Infamous ransomware-as-a-service group LockBit has previously hit Bank Syariah Indonesia, which didn't pay the ransom and has had its stolen data leaked online.
It is unclear whether this latest attack can be linked to the LockBit RaaS or one of its affiliates, since the LockBit 3 builder has been leaked in September 2022 and can therefore be used by any threat actor to create customized versions on the ransomware.
News URL
https://www.helpnetsecurity.com/2024/06/25/lockbit-indonesia-us-fed/
Related news
- US seizes domain of Garantex crypto exchange used by ransomware gangs (source)
- New kids on the ransomware block channel Lockbit to raid Fortinet firewalls (source)
- Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom (source)
- Suspected LockBit ransomware dev extradited to United States (source)
- UK fines software provider £3.07 million for 2022 ransomware breach (source)
- Oracle Health breach compromises patient data at US hospitals (source)
- Retail giant Sam’s Club investigates Clop ransomware breach claims (source)
- Texas State Bar warns of data breach after INC ransomware claims attack (source)
- Port of Seattle says ransomware breach impacts 90,000 people (source)
- Food giant WK Kellogg discloses data breach linked to Clop ransomware (source)