Boeing Confirms LockBit’s $200M Cyber Extortion Attempt

Published:

Boeing Confirms $200 Million Cyber Extortion Demand from LockBit Ransomware Gang in October 2023

Boeing Faces $200 Million Cyber Extortion Demand from LockBit Ransomware Gang

Boeing, the multinational aeronautical and defense corporation headquartered in Virginia, has confirmed being the victim of a cyber extortion attack by the LockBit ransomware gang. The cybercriminals demanded a staggering $200 million to not publish leaked data from the company’s parts and distribution operations.

The U.S. Department of Justice unsealed an indictment that revealed Dmitry Yuryevich Khoroshev as the principal administrator behind the LockBit ransomware operation. This coordinated international effort included sanctions from the U.S., the U.K., and Australia.

LockBit first listed Boeing as its victim on October 27, setting a ransom payment deadline for November 2. Despite initially choosing not to comment on the incident, Boeing eventually confirmed falling victim to the cyberattack. However, negotiations reportedly failed, leading LockBit to threaten to publish 4 gigabytes of sample data as proof of the breach.

As the ransom demands escalated, LockBit published over 40GB of data on November 10, indicating that Boeing likely did not agree to pay the $200 million extortion demand. This incident marks one of the largest ransom demands from a ransomware gang to date, with analysts suspecting LockBit made the inflated demand merely to test the waters.

The cyberattack on Boeing underscores the persistent threat posed by ransomware gangs like LockBit to major corporations. With over 1700 attacks executed in the United States alone, LockBit’s aggressive tactics highlight the urgent need for robust cybersecurity measures to safeguard sensitive information and prevent future breaches.

CHAPTER X // CYBER AWARENESS CAMPAIGN
BEYOND THE BALLROOM
[C://ME] // CHAPTER X

REQUEST THE MEDIA KIT

Tell us where to send the Beyond the Ballroom media deck. Every field is required.

We will use these details to respond to your media-kit request. Privacy Policy

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

PHP addresses critical security vulnerabilities allowing potential remote code execution

PHP has released a critical security update addressing vulnerabilities that could allow attackers to execute commands on any web server running the language. This...

Critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619 identified by Unit 42

Recent findings from Unit 42 have identified critical vulnerabilities in PHP, specifically CVE-2026-109618 and CVE-2026-109619, which could allow attackers to execute arbitrary code on...

Compromised LiteLLM 1.107.0 package leads to widespread credential theft via Python startup hooks

On October 21, 2026, a compromised version of the LiteLLM 1.107.0 package was uploaded to the Python Package Index (PyPI), leading to significant credential...

FCC bans devices with surveillance chips from Huawei subsidiary HiSilicon

The Federal Communications Commission (FCC) has enacted a ban on two devices equipped with surveillance chips produced by HiSilicon, a subsidiary of the Chinese...