💰💣
LockBit Security Incident
20/02/2024
580 days ago
Resolved
Incident Overview
Situation Description
The National Crime Agency (NCA) has disrupted LockBit, the world's most harmful cybercrime group, by taking control of their services and compromising their criminal enterprise.
Event Types
Ransomware
Malware / Destructive Attack
Industry Sector
OtherGeographic Scope
GlobalResponse Actions
Isolated Compromised Systems
Restored Systems from Secure Backups
Conducted Threat Hunting & Eradication
Shared Threat Intelligence
Collaborated with Peers / Community
Impact Analysis
Event Types (2 identified)
Ransomware
Malware / Destructive Attack
Financial Impact
$0 USDRecords Affected
0Data Types Compromised
PII (Personally Identifiable Information)
Financial Data (Credit Cards, Bank Accounts)
Credentials
Government Data
Source Code
Operational / System Data
Primary Impacts
Financial Loss
Data Exposure
Operational Disruption
Key Decisions Made
The NCA has taken control of LockBit's primary administration environment and public-facing leak site.; The NCA has obtained the LockBit platform's source code and a vast amount of intelligence.; Over 1,000 decryption keys have been obtained to assist victims.
Technical Analysis
Attack Method
Unknown
Threat Actor Attribution
LockBit
Vulnerability / Tool
Stealbit
Additional Information
Quick Facts
- Company:
- LockBit
- Date:
- 20/02/2024
- Status:
- Resolved
- Decision Maker:
- National Crime Agency (NCA)
- Position:
- nan
- Published:
- 20/02/2024
Source Information
Original Query
FBI takedown of ALPHV/BlackCat infrastructure impact on victim recoveryTimeline
Information Published
20/02/2024
Incident Occurred
20/02/2024 (580 days ago)
Status: Resolved
Estimated resolution based on age