lockbit2 attacks Mandiant Singapore Private Limited

Incident Date:

June 6, 2022

World map



lockbit2 attacks Mandiant Singapore Private Limited


Mandiant Singapore Private Limited




Temasek, Singapore

Centennial Tower,, Singapore

First Reported

June 6, 2022

Mandiant Singapore Private Limited Suffers Ransomware Attack by Lockbit2

Company Overview

Mandiant, a premier cybersecurity firm, provides comprehensive services such as threat intelligence, incident response, and security validation. Founded in 2004, the company boasts a robust response to over 1,000 engagements annually. With a dedicated team of more than 500 researchers and analysts fluent in over 30 languages, Mandiant diligently monitors over 300 threat actors globally.

Vulnerabilities and Impact

The exact vulnerabilities exploited in the ransomware attack on Mandiant Singapore Private Limited remain unspecified. Nonetheless, ransomware attacks generally leverage gaps in security measures, including outdated software, weak passwords, or the lack of adequate employee cybersecurity awareness.

The repercussions of such an attack are far-reaching, potentially resulting in data compromise, operational downtime, and the financial burdens of recovery efforts and ransom settlements. For Mandiant Singapore Private Limited, this incident could hinder their capacity to deliver critical threat intelligence and incident response services to their clientele.

Response and Mitigation

Mandiant's annual report sheds light on the dynamic cyber threat landscape, emphasizing ransomware defense and containment tactics. Additionally, the firm has published a white paper on cybersecurity risk assessment, advocating for the testing of prevention mechanisms against actual ransomware scenarios.

The breach of Mandiant Singapore Private Limited by Lockbit2 serves as a stark reminder of the persistent ransomware menace facing various sectors. Although the specific vulnerabilities targeted remain undisclosed, it accentuates the necessity for robust security frameworks and readiness to counter cyber threats.


Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.