Boeing confirms LockBit ransomware attack

On November 2, 2023, the US aircraft manufacturer Boeing confirmed it had suffered a cyberattack, which hit its spare parts and distribution businesses. “The issue does not affect flight security. We are actively investigating the incident with law enforcement and regulatory authorities. Our customers and providers have been informed,” explained the aircraft manufacturer.

On October 27, 2023, the Russian-speaking ransomware gang claimed responsibility for an attack against Boeing. The cybercriminals claimed they extracted “an enormous amount of sensitive data,” which they were “ready to release if Boeing did not reach out before the deadline!” In particular the data could contain sensitive information on the US Air Force.

LockBit had given Boeing until November 2 to contact them, or run the risk of having the data disclosed. Since Boeing’s announcement, the ultimatum has vanished from LockBit’s website, which may suggest Boeing has entered into negotiations with the cybercriminal group.