LG Energy Solution targeted in ransomware attack linked to Akira gang

LG Energy Solution, one of the world’s largest battery manufacturers, confirmed it had been hit by a ransomware attack after a cybercriminal group claimed to have stolen a large cache of company data.

A spokesperson for the South Korea–based company said the incident affected a single overseas facility and did not impact headquarters or other global sites. The company operated multiple plants across several continents, including eight in North America. The affected location resumed normal operations after recovery efforts, and the company initiated additional security measures and ongoing investigations.

The spokesperson declined to provide details about the nature of the intrusion. LG Energy Solution, a subsidiary of Korean conglomerate LG, generated $17.5 billion in revenue in 2024 through its work supplying batteries to major automakers.

The Akira ransomware gang added LG Energy Solution to its leak site on Monday, claiming responsibility for the attack and alleging it had stolen 1.7 terabytes of data spanning corporate documents, employee databases, and other sensitive material. On November 13, the FBI issued an updated notice identifying Akira as a group that had amassed more than $244 million in ransomware payments. The alert warned that the gang targeted manufacturing businesses and other critical industries.

The growing strategic importance of battery production has made the sector a frequent target for cybercriminals. German battery maker Varta AG endured weeks of operational disruption following a cyberattack last year, and hackers stole $60 million in 2024 from a major supplier of essential battery materials.