LockBit3 Ransomware Attack on Dental Practice: Vulnerabilities and Impact

Incident Date:

May 27, 2024

World map

Overview

Title

LockBit3 Ransomware Attack on Dental Practice: Vulnerabilities and Impact

Victim

Longview & Salmon Creek Oral Surgery and Periodontics

Attacker

Lockbit3

Location

Longview, USA

Washington, USA

First Reported

May 27, 2024

LockBit3 Ransomware Attack on Longview & Salmon Creek Oral Surgery and Periodontics

Company Overview

Longview & Salmon Creek Oral Surgery and Periodontics is a specialized dental practice dedicated to providing high-quality oral surgery and periodontic care. The practice focuses on creating a caring and compassionate environment, prioritizing patient comfort and health. They offer a range of services, including dental implants, extractions, and other oral surgical procedures, ensuring comprehensive care for their patients.

Company Size

The practice is moderately sized, reflecting its specialized focus on dental care and the variety of services it offers to its patients.

Company Standout

What sets Longview & Salmon Creek Oral Surgery and Periodontics apart is their unwavering commitment to patient care and comfort. Their dedication to providing high-quality dental services in a welcoming environment distinguishes them in the industry.

Company Vulnerabilities

As a healthcare provider, Longview & Salmon Creek Oral Surgery and Periodontics handles sensitive patient data, including medical records and personal information. This makes them a prime target for cybercriminals like the LockBit3 ransomware group. Their reliance on digital systems for patient management and record-keeping increases their vulnerability to ransomware attacks.

Attack Overview

On May 27, 2024, at 7:07:19, the LockBit3 ransomware group targeted the website of Longview & Salmon Creek Oral Surgery and Periodontics, longviewoms.com. The attackers managed to breach the company's systems and leak sample data, indicating a successful ransomware attack.

Ransomware Group Profile

LockBit3, also known as LockBit Black, is an advanced ransomware group known for its sophisticated and dangerous ransomware threats. As a Ransomware-as-a-Service (RaaS) group, LockBit3 actively recruits affiliates to expand its reach, targeting a wide array of businesses and critical infrastructure organizations globally.

How LockBit3 Penetrated the Company's Systems

LockBit3 employs advanced capabilities, including file encryption, desktop modifications, and lateral movement through networks. Their ransomware is heavily obfuscated, making it challenging for security researchers to analyze and defend against. The group's focus on recruiting affiliates and targeting organizations worldwide likely contributed to their successful penetration of Longview & Salmon Creek Oral Surgery and Periodontics' systems.

Sources:

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.