lockbit2 attacks PIA Groups

Incident Date:

February 19, 2022

World map



lockbit2 attacks PIA Groups


PIA Groups




Foreestelaan, Belgium

Gent, Belgium

First Reported

February 19, 2022

PIA Group Targeted by Lockbit2 Ransomware Attack

Company Overview

PIA Group operates in the manufacturing sector and has a website that provides information about their affiliate websites, member benefits, and industry news. The company's website does not provide detailed information about its size or unique features that set it apart in its industry.


The specific vulnerabilities that led to the successful attack on PIA Group are not detailed in the search results. However, it is known that Lockbit2 actors gain access to victim systems through valid Remote Desktop Protocol (RDP) credentials and use open-source tools and command-line scripting for discovery and credential harvesting. They also exfiltrate victim data via File Transfer Protocol (FTP), Rclone, or Mega.

Mitigation Strategies

While the article does not include general information about mitigating ransomware attack risks, it is essential for organizations to implement robust cybersecurity measures, such as:

  • Regularly updating software and systems
  • Ensuring strong passwords and multi-factor authentication
  • Educating employees about phishing and social engineering tactics
  • Backing up data and testing recovery processes
  • Implementing network segmentation and access controls
  • Monitoring for unusual network activity


Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.