lockbit3 attacks Hering & Heinz GmbH & Co. KG

Incident Date: Sep 19, 2022

Attack Overview
VICTIM
Hering & Heinz GmbH & Co. KG
INDUSTRY
Construction
LOCATION
Germany
ATTACKER
Lockbit
FIRST REPORTED
September 19, 2022

Hering & Heinz GmbH & Co. KG Targeted by Lockbit3 Ransomware Group

Company Overview

Hering & Heinz GmbH & Co. KG is a well-known company in the heating, sanitation, and bathroom design industry. They offer services for heating and sanitation installations in residential and commercial properties, including single-family homes, multi-family homes, and commercial buildings. Their expertise extends to consulting, planning, and installation of heating systems, sanitation systems, and bathroom designs. The company has a reputation for quality and affordability, making them a popular choice for customers in the region.

Vulnerabilities and Targeting

The Lockbit3 ransomware group has targeted Hering & Heinz GmbH & Co. KG, exploiting vulnerabilities in their systems. The exact nature of the vulnerabilities is not disclosed in the available information, but it is known that the attack occurred on a decommissioned marketing website hosted on an external platform. The company's internal systems are reportedly operating normally, and there is no evidence of a broader attack at this time.

Industry Trends and Mitigation

Ransomware attacks on companies in the Construction sector have been on the rise, with several large food manufacturers facing data theft incidents in 2023. The Lockbit3 group has been active since around 2018 and has targeted various sectors, including defense, critical infrastructure, technology, and food and agriculture. The group uses double-extortion tactics, encrypting victims' systems and threatening to leak stolen data if a ransom is not paid.

To mitigate the risks of ransomware attacks, companies should implement robust cybersecurity measures, such as regular software updates, strong passwords, and employee training on cybersecurity best practices. Additionally, companies should consider implementing a disaster recovery plan to minimize the impact of a successful attack.

Sources

  • Hering & Heinz GmbH & Co. KG - Heizung, Sanitär und Badgestaltung: Hering & Heinz aus Pottum
  • Kraft Heinz reviewing claims of cyberattack but internal systems ‘operating normally’ - SecurityWeek
  • Kraft Heinz investigating possible cyberattack - TechRadar
  • Kraft Heinz probes ransomware attack claim - Cybersecurity Dive

Disclaimer

The Halcyon Attacks Lookout Database is compiled using publicly available information based on the hosting choices of real-world threat actors and data from a variety of trackers. This information is provided in accordance with principles of fair use. Halcyon has made reasonable efforts to sanitize and verify the data; however, we do not guarantee the accuracy, completeness, or reliability of the information provided. Updates to the database are made as new source data becomes available from reputable sources.  By accessing, viewing, or using the information within the Halcyon Attacks Lookout Database, you acknowledge and agree to do so entirely at your own risk. No reliance should be placed upon the information for decision-making, and Halcyon disclaims all liability for any inaccuracies or omissions in the data.

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.