Royal Mail faces threat from ransomware group LockBit

Reuters

Published Feb 07, 2023 13:38

Updated Feb 08, 2023 00:06

(Reuters) -UK's Royal Mail (LON:IDSI) is facing a threat from ransomware group LockBit, according to information published on a website, at a time when the British postal and parcel firm is grappling with the fallout of a "cyber incident" from last month.

LockBit has said it would publish stolen data on Feb. 9 if Royal Mail failed to pay a ransom, a screenshot of the group's blog on the dark web on darkfeed.io, a website which tracks ransomware groups, showed.

TechCrunch, earlier in the day, reported that Royal Mail was added to LockBit's dark web leak site this week and the group was threatening to publish "all available (Royal Mail) data".

In an emailed response to Reuters, Royal Mail said evidence from its investigation so far suggested that the data allegedly obtained from its network did not contain any financial information or other sensitive customer information.

LockBit was behind a ransomware attack that hit ION Trading UK recently.

Ransomware is a form of malicious software deployed by criminal gangs which works by encrypting data, with hackers offering the victim a key in return for payments. Such ransom demands can total millions of dollars.

Separately, Royal Mail said on its website that the disruptions to its international services due to the cyber incident were continuing and only some of the services have been restored.