LockBit takes a bite out of Subway with ransomware attack

Prolific ransomware gang LockBit targets a popular sandwich franchise – “The biggest sandwich chain is pretending that nothing happened.”

The LockBit 3.0 ransomware gang claims to have hacked the popular fast-food joint Subway.

The group posted some details of the hack on 21 January, stating that Subway has until 2 February to pay up and stop at least 200 gigabytes of data from being published on its darknet leak site.

“The biggest sandwich chain is pretending that nothing happened,” LockBit said in a blog post.

============

“We exfiltrated their SUBS internal system which includes hundreds of gigabytes of data and all financial expects [sic] of the franchise, including employee salaries, franchise royalty payments, master franchise commission payments, restaurant turnovers etc. We are giving some time for them to come and protect this data, if no we are open to sell to competitors.”

LockBit has not disclosed the ransom figure, and Subway has not yet made any comment of its own.

LockBit was by far the most active ransomware operator last week, with nine separate victims – or 26 per cent of the total ransomware incidents observed for the period. Subway was just one of six organisations that LockBit claims to have hacked on 21 January alone.

Cyber Daily has reached out to Subway for further commentary.

David Hollingworth

David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.