LockBit Demands $25M Ransom from Canadian Drug Store Chain

Threatens to Leak Stolen Data; Attack Temporarily Shut Down Retail Pharmacy Stores Marianne Kolbasuk McGee (HealthInfoSec) • May 22, 2024

Russian-speaking cybercriminals demanded a $25 million ransom from Canadian pharmacy retail chain London Drugs following an attack detected in late April that forced the company to temporarily close its 79 stores across western Canada for more than a week.

See Also: OnDemand | Overcoming the Limitations of Addressing Insider Threat in Banking: Real Solutions for Real Security Challenges

Ransomware-as-a-service group LockBit this week threatened to release data stolen in the attack unless London Drugs pays the ransom by Thursday. The cybercrime gang complained that so far, London Drugs is "only willing" to pay $8 million of the demand, according to a screenshot of the LockBit leak site taken Tuesday. As of Wednesday, a listing for London Drugs does not appear on the LockBit site.

"Someone help the poor pharma ...