lockbit2 attacks tvothai

Incident Date:

April 21, 2022

World map

Overview

Title

lockbit2 attacks tvothai

Victim

tvothai

Attacker

Lockbit2

Location

Thon Buri, Thailand

Bangkok, Thailand

First Reported

April 21, 2022

Ransomware Attack on TVO Thai

On April 10, 2024, the ransomware group Lockbit2 claimed responsibility for an attack on TVO Thai, a prominent player in the Manufacturing sector. TVO Thai, officially known as บริษัท น้ำมันพืชไทย จำกัด (มหาชน), was founded in 1993 and has since escalated its production capabilities to 6,000 tons of oil per day, catering to both domestic and international markets.

The organization is celebrated for its dedication to sustainability, earning a spot among the top 20 companies in Thailand's Sustainability Disclosure Awards for three consecutive years, beginning in 2023. Furthermore, TVO Thai has been acknowledged in the SET ESG Rating for its commendable environmental, social, and governance (ESG) performance.

The cyberattack by Lockbit2 underscores the persistent vulnerabilities faced by entities in the manufacturing sector. Despite TVO Thai's rigorous commitment to sustainability and ESG standards, these measures did not shield them from the ransomware attack. The specific security weaknesses exploited in this incident have not been disclosed. However, this event serves as a critical reminder of the importance of comprehensive cybersecurity strategies to mitigate such risks.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.