Electric Mirror LLC Targeted by INC Ransom: A Ransomware Attack Story

Incident Date:

May 8, 2024

World map

Overview

Title

Electric Mirror LLC Targeted by INC Ransom: A Ransomware Attack Story

Victim

Electric Mirror LLC

Attacker

Inc Ransom

Location

Everett, USA

Washington, USA

First Reported

May 8, 2024

Ransomware Attack on Electric Mirror LLC by INC Ransom

Attack Overview

Electric Mirror LLC was targeted by INC Ransom in a ransomware attack where sensitive data amounting to $800,000 worth was exfiltrated. The stolen data included accounting and finance data, administrative documents, and technical designs. Some of the stolen data was leaked publicly, posing significant risks to the company's operations and reputation.

Company Profile

Electric Mirror LLC is a company based in the USA that specializes in manufacturing high-quality lighted mirrors and mirror cabinets for residential and commercial use. The company was founded in 1997 and is headquartered in Everett, Washington. Electric Mirror LLC is known for its innovative designs and commitment to providing the best lighting experience for its customers. They offer a wide range of products, including front-lit mirrors, lighted mirror cabinets, and specialty mirrors.

The company operates in the Manufacturing sector and is a standout company in the lighting industry due to its focus on innovation, quality, and customer satisfaction. Their products are used in various settings such as hotels, resorts, homes, and other residential spaces. The company has a global presence, with products installed in over one million hotel rooms and homes across 100 countries.

Company Vulnerabilities

Their prominence in the industry and the high-end nature of their products may have made them a target for threat actors like INC Ransom. The company's emphasis on luxury, quality, and design could have attracted cybercriminals looking to exploit valuable data and disrupt operations. Furthermore, the global reach of Electric Mirror LLC may have exposed them to cyber threats from various regions.

Ransomware Group INC Ransom

INC Ransom is a highly sophisticated cybercriminal group known for its targeted ransomware attacks on corporate and organizational networks. The group employs advanced techniques like spear-phishing campaigns, exploiting vulnerabilities, and using legitimate system tools for reconnaissance and lateral movement within a network. INC Ransom's attacks involve encrypting and stealing data, as well as threatening to release it publicly to pressure victims into paying ransom demands. The group has targeted industries such as healthcare, education, government entities, and technology companies.

Sources:

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.