Ransomware

LockBit Claims Responsibility for Attack on Destilerías Unidas, S.A.

In October 2021, Destilerias Unidas, S.A. (DUSA), a major Venezuelan spirits producer, was the target of a ransomware attack. Although the incident was initially attributed to the LockBit 2.0 group with a disclosure date of October 8, 2021, forensic evidence from screenshots of the data leak site indicates the presence of files dated 2022 on the LockBit 3.0 infrastructure. The attack involved the possible encryption and exfiltration of corporate data, although the specific volume of leaked information and the total material impact on the company’s operations remain unconfirmed by official sources.

Overview

Missing evidence

No official statement, victim acknowledgment, or independent technical validation was found.The publicly available evidence corroborates the ransomware claim, but not the authenticity of the leaked data or the material impact.No independent reports or official acknowledgment were found; the extent of the intrusion and any data breaches remain unverified.A second tracker, news coverage, or a statement from the victim or CERT would be needed to support a claim that goes beyond that of a threat actor.

Impact details

Ransomware.live added dusa.com.ve to its list of LockBit2 victims on October 8, 2021. No official statements, confirmation of the breach, data categories, or operational impact have been found.

alleged corporate data

Classification & severity

Category
Malicious code
Subtype
Ransomware
Confidence
Medium

A public ransomware or data breach tracker, or a report on ransomware, identifies the victim as part of a ransomware or extortion campaign; confirmation from the victim is not yet available.

Severity assessment

Medium
Information impact
Proprietary data
Affected scope
Organization-wide
Critical service
None
Public confidence
Limited
Recoverability
Extended

Cases of ransomware or extortion have been corroborated by public trackers or reports, but have not been officially confirmed, nor has their operational impact been validated.

Data exfiltration· Claimed Confidentiality

Timeline

Claim

LockBit listed Destilerias Unidas, S.A. as an alleged victim.

Evidence & sources

1 source