Boeing Investigates Cyber Attack Affecting Parts Business, Russian-Linked LockBit Ransomware Gang Suspected
Cyber attack targets Boeing's parts and distribution business, threatening sensitive data; Company assures no impact on flight safety.
- Boeing has confirmed a cyber attack targeting its parts and safety business, believed to have been orchestrated by the Russia-linked LockBit ransomware gang. The company insists that the incident does not impact flight safety.
- LockBit, listed as 2022’s most prolific ransomware operator by the US Cybersecurity and Infrastructure Security Agency, initially threatened to publish stolen sensitive data if a ransom was not paid by November 2. This listing was later removed, typically indicating that negotiation or payment has occurred.
- It remains unclear whether Boeing complied with LockBit's ransom demand. Paying ransom to sanctioned groups like LockBit, believed to be affiliated with the earlier sanctioned Evil Corp, can violate US law.
- The unspecified breached data is part of Boeing's parts and distribution operations. This aspect of the business, part of the Global Services division, is vital for providing material and logistical support to customers.
- Boeing has not disclosed the details of potential data exfiltration, maintaining that it is currently investigating the incident and cooperating with appropriate regulatory and law enforcement agencies.