LockBit ransomware group publishes 600GB of data stolen from Fullerton India

The LockBit ransomware group has leaked 600 gigabytes of data stolen from Indian non-banking financial company Fullerton India just two weeks after it demanded the company pay a $3 million ransom to recover the stolen files.

Fullerton India Credit Company Ltd, a leading Indian non-banking financial company that offers loan products to small businesses and individuals, suffered a major ransomware attack on April 24 and started notifying its stakeholders about the cyber security incident that forced the company to take its systems offline.

Without sharing any details regarding how the threat actors infiltrated its network or what kind of data was compromised, the company said it worked with “top, global experts to significantly enhance its security environment for future expansion.”

The notorious Lockbit 3.0 ransomware gang claimed responsibility for the cyber attack on Fullerton India and listed the company as a victim on its data leak site. The group gave Fullerton India until April 29 to pay a ransom of $2.9 million to recover the stolen data, failing which it would publish all stolen data. The group also gave Fullerton the option to extend the deadline by 24 hours by paying $1,000.

According to local media, the ransomware group on May 3 published more than 600 GB of data it stole from the company on the dark web, indicating that the company refused to pay a ransom. The leaked data included loan agreements with individuals and legal entities, the status of customer and organizational accounts, agreements with banks and other financial institutions, data on international transfers, and financial documents, including sales information, and mail correspondence.

The leaked data also included sensitive personal information of Fullerton India’s customers including their names, Aadhaar card numbers, residential addresses, phone numbers, cheque numbers, customer IDs, bank account numbers, Real Time Gross Settlement (RTGS) information, National Electronic Funds Transfer (NEFT) information, branch codes, financial transactions including withdrawals and deposits and more.

Despite the Lockbit ransomware gang publicly proving their claims and releasing 600GB of data, Fullerton India hasn’t shared any details on how it is planning to deal with the data breach, nor has released a statement to the media.