lockbit3 attacks rovagnati

Incident Date:

July 19, 2022

World map

Overview

Title

lockbit3 attacks rovagnati

Victim

rovagnati

Attacker

Lockbit3

Location

Biassono MB, Italy

Biassono MB, Italy

First Reported

July 19, 2022

Rovagnati, a Consumer Services Company Targeted by Lockbit3 Ransomware

Company Overview

Rovagnati, an esteemed Italian salumi producer, is celebrated for its commitment to quality and tradition. The company prides itself on its Corporate Social Responsibility initiative, Rovagnati Qualità Responsabile, which embodies the principles of Buono, Sano, and Giusto. Marking a significant milestone, Rovagnati inaugurated a new production facility in New Jersey in 2021, blending Italian craftsmanship with cutting-edge technology.

Vulnerabilities and Mitigation

The precise vulnerabilities exploited in the Rovagnati ransomware attack remain unspecified. Nonetheless, the Lockbit3 group's modus operandi includes targeting entities with unpatched systems or outdated software. To counteract such threats, it is imperative for organizations to engage in regular vulnerability assessments, ensure the integrity of backups by keeping them offline, and adhere to software update schedules.

Response and Recovery

In the aftermath of a ransomware attack, it is crucial for the affected entity to notify federal law enforcement and solicit guidance from the Cybersecurity and Infrastructure Security Agency (CISA). Rovagnati should also contemplate the establishment of an employee training program focused on cybersecurity awareness. Furthermore, the implementation of software restriction policies can significantly curtail the execution of unauthorized software, bolstering the company's defense mechanisms against future attacks.

The Lockbit3 ransomware incident underscores the critical nature of cybersecurity within the Consumer Services sector. Vigilance and adherence to established cybersecurity best practices are essential in mitigating the risk of such breaches.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.