Digital transformation company Orion Innovation has reportedly been hit by a ransomware attack by the LockBit group.
The leading ransomware gang claimed an attack on the company on Tuesday, adding it to a list of victims on its deep web-based leak site.
It's currently unclear how much data LockBit is claiming to have stolen from Orion Innovation, but the US-based firm has been given a deadline of 1 September to pay the ransom.
LockBit is one of the most pervasive ransomware gangs in operation, and frequently deploys a double extortion model whereby a victim’s data is stolen before the ransomware program is executed, locking the business out of their computers.
The data is then held by the hackers after the devices are encrypted to provide an added incentive to pay the ransom. If a ransom isn’t paid, LockBit then publishes the data that has been stolen, which often includes sensitive information on the company’s employees and clients.
Orion Innovation is a multiple Emmy Award-winning company, noted for its work in building solutions to collect TV viewer data, among other work.
It also has a star-studded Fortune 1,000 client list, having worked with the likes of Major League Baseball, AT&T, Bank of America, Chase, Red Hat, Cisco, and IBM.
The company is headquartered in New Jersey but has offices across the globe, including the UK, Russia, Israel, India, Australia, and Germany.
RELATED RESOURCE
Organisations accelerating their digital workplace achieve improvements
See the biggest return on device investments
IT Pro has contacted Orion Innovation for confirmation of the reports.
Since publishing the data it stole from cyber security company Entrust last week, LockBit has claimed attacks on eight additional organisations, including Orion Innovation, despite battling an ongoing distributed denial of service (DDoS) attack.
The latest victims include a number of law firms, a substance abuse and mental health service, and a construction company.
LockBit has also been accused of attacking a French hospital located near Paris, holding it to ransom for $10 million, although the company has not been listed on the group's dark web page.
The Center Hospitalier Sud Francilien (CHSF) confirmed the 21 August attack and was also reportedly forced to turn patients away as a result of the disruption caused by the attack.
-
The unseen risk in Microsoft 365: disaster recoveryBusinesses that assume they’re covered for data backup could come unstuck in a time of crisis
-
Anthropic CEO Dario Amodei's prediction about AI in software development is nowhere nearly to becoming a realityNews In March, Anthropic CEO Dario Amodei claimed up to 90% of code would be written by AI within six months – his prediction hasn't quite come to fruition.
-
Prolific ransomware operator added to Europe’s Most Wanted list as US dangles $10 million rewardNews The US Department of Justice is offering a reward of up to $10 million for information leading to the arrest of Volodymyr Viktorovych Tymoshchuk, an alleged ransomware criminal.
-
Jaguar Land Rover “did the right thing” shutting down systems to thwart cyber attackNews The attack on Jaguar Land Rover highlights the growing attractiveness of the automotive sector
-
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalitiesNews The attack on IT systems supplier Miljödata has impacted public sector services across the country
-
A notorious hacker group is ramping up cloud-based ransomware attacksNews The Storm-0501 threat group is refining its tactics, according to Microsoft, shifting away from traditional endpoint-based attacks and toward cloud-based ransomware.
-
Security researchers have just identified what could be the first ‘AI-powered’ ransomware strain – and it uses OpenAI’s gpt-oss-20b modelNews Using OpenAI's gpt-oss:20b model, ‘PromptLock’ generates malicious Lua scripts via the Ollama API.
-
Data I/O shuts down systems in wake of ransomware attack
News Regulatory filings by Data I/O suggest the costs of dealing with the attack could be significant
-
Average ransom payment doubles in a single quarterNews Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new groupNews The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
