LG Energy Solution, a South Korea-based subsidiary of LG and one of the world’s largest battery manufacturers (earning $17.5 billion in 2024), confirmed a ransomware attack targeting a specific overseas facility. The Akira ransomware gang claimed responsibility, asserting they stole **1.7 terabytes of data**, including **corporate documents and employee databases**. While the headquarters and other facilities remained unaffected, the incident disrupted operations at the targeted site, requiring recovery measures before normal functionality resumed. The FBI had previously flagged Akira for its aggressive tactics, noting over **$244 million in ransom proceeds** and disruptions across critical sectors like manufacturing, hospitals, and schools. The attack underscores the growing threat to battery suppliers, following similar incidents like Varta AG’s weeks-long outage in 2023 and a $60 million theft from another key material supplier in 2024. LG is conducting investigations but has not disclosed further details about the breach’s scope or potential ransom demands.
Source: https://therecord.media/lg-energy-solution-ransomware-incident-battery-maker
LG Energy Solution cybersecurity rating report: https://www.rankiteo.com/company/lgenergysolution
"id": "LGE5202152111925",
"linkid": "lgenergysolution",
"type": "Ransomware",
"date": "6/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'battery manufacturing',
'location': ['South Korea (HQ)',
'overseas facility (unspecified)',
'facilities in North America (8) and '
'other continents'],
'name': 'LG Energy Solution',
'size': 'large (global, $17.5B revenue in 2024)',
'type': 'subsidiary (of LG Corp)'}],
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': True,
'sensitivity_of_data': 'high (employee PII and corporate '
'data)',
'type_of_data_compromised': ['corporate documents',
'employee information']},
'description': 'LG Energy Solution, one of the world’s largest battery '
'makers, confirmed a ransomware attack by the Akira gang, '
'which claimed to have stolen 1.7 TB of data, including '
'corporate documents and employee databases. The attack '
'targeted a specific overseas facility, which has since been '
'recovered and is operating normally. The company is '
'conducting security investigations as a precautionary '
'measure.',
'impact': {'brand_reputation_impact': 'potential reputational damage due to '
'data breach and ransomware association',
'data_compromised': ['corporate documents',
'employee information databases'],
'identity_theft_risk': 'high (employee information compromised)',
'operational_impact': 'temporary disruption (facility recovered '
'and operating normally)',
'systems_affected': ['specific overseas facility']},
'initial_access_broker': {'high_value_targets': ['employee databases',
'corporate documents']},
'investigation_status': 'ongoing (precautionary security operations and '
'investigations)',
'motivation': ['financial gain', 'data theft'],
'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'Akira'},
'references': [{'date_accessed': '2023-11-13',
'source': 'FBI Advisory on Akira Ransomware'},
{'source': 'LG Energy Solution Spokesperson Statement'},
{'source': 'Akira Ransomware Leak Site'}],
'response': {'communication_strategy': ['public statement confirming attack',
'limited details shared'],
'containment_measures': ['isolation of affected facility'],
'incident_response_plan_activated': True,
'recovery_measures': ['facility restored to normal operations'],
'remediation_measures': ['security measures implemented',
'investigation conducted']},
'threat_actor': 'Akira ransomware gang',
'title': 'LG Energy Solution Ransomware Attack by Akira Gang',
'type': 'ransomware'}