LockBit have claimed their biggest victim so far this year, and we haven’t finished January yet.
The Dark Web site for the ransomware gang is currently showing that they have managed to compromise the infrastructure of Subway.com and are giving the company until the 2nd of February to make contact or the date obtained will be sold
The post states that the attackers have managed to access the internal SUBS system which holds all the financial data of the franchise company including employee salaries, franchise royalty payments, master franchise commission payments, restaurant turnovers etc.
Subway franchises operate almost 37,000 outlets in more than 100 countries, employ more than 300,000 people and have an annual turnover of approx $16B USD*. In February last year, the company approached JPMorgan to advise on a potential sale seeking a valuation of almost $10B USD
*Note – Subway is a privately owned company and as such is not required to issue financial statements.
If the LockBit ransom rules of 3% of annual turnover still stand, that could see a ransom of roughly $480,000,000 being asked.
