LockBit Claims Responsibility for Cyberattack on Tire Manufacturing Giant Bridgestone Americas

Bridgestone Americas, a tire manufacturing giant headquartered in Nashville, Tennessee with approximately 55,000 employees, was recently the victim of a cyberattack claimed by the LockBit ransomware group. Bridgestone, the parent company, has over 130,000 employees and various production locations globally. LockBit revealed that Bridgestone Americas’ alleged exfiltrated data will be published on their leak site if they do not pay the demanded ransom and launched a countdown time that initially ended on March 11th, 2022, at 23:59 but has been extended to March 15th, 2022, at 23:59. The company confirmed to the media (NewsChannel5) that it launched an investigation for a “potential information security incident” on February 27th, 2022, but has yet to confirm if any data has been stolen during the cyberattack. Bridgestone Americas stated that they “disconnected many of [their] manufacturing and retreading facilities in North America and Latin America from [their] network to contain and prevent any potential impact”. At this time in their investigation, Bridgestone Americas determined that the incident was a result of a ransomware attack, that there is no evidence of the attack being targeted, and that “the threat actor has followed a pattern of behavior common to attacks of this type by removing information from a limited number of Bridgestone systems and threatening to make this information public”. CTIX analysts will continue to monitor this situation as well as LockBit’s activity and supply updates as they are available.