Ransomware Group: LOCKBIT3

VICTIM NAME: kumhotire[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the LOCKBIT3 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertaining to Kumho Tire, a South Korean tire manufacturer, was discovered on September 26, 2024, with the information published on September 25, 2024. Kumho Tire operates as a subsidiary of Doublestar and was previously part of the Kumho Asiana Group. The leak site is associated with the LockBit 3 ransomware group. While the specific nature of the compromised data is not detailed, it is reported that various types of sensitive information have been extracted.

Notably, the leak contains data related to a total of 30 users, 3 employees, and information from 22 third-party entities, with 15 domains associated with those third parties mentioned. The leak page likely includes both static and external links to the compromised data, though specific URLs are omitted for privacy and security reasons. The page features a screenshot illustrating certain aspects of the leak, potentially showcasing internal documents or data summaries. The attack impacts the manufacturing sector, emphasizing the vulnerabilities faced by companies in this industry.