SXI, a Philippine-based digital solutions firm, has reportedly been added to the LockBit ransomware gang’s list of victims. This news came from a post published by the threat group on their leak site, stating that the stolen data from the company would be published on April 23.
Solutions Exchange, Inc. (SXI) supports a multitude of banking institutions in the Philippines through their wide array of globally competitive digital solutions. The company’s products include online banking platforms, API-based back-end systems, remittance solutions, loans management, data analytics and support systems, customer onboarding, and lobby management.
Some of the company’s Philippine-based banking institution clients are the Bank of Commerce, BDO, BPI, ChinaBank, LandBank, PBCOM, PSBank, RCBC, RobinsonsBank, Security Bank, and Sterling Bank of Asia.
SXI have yet to respond to the threats from LockBit.
Since LockBit’s initial announcement last April 7, there has been no comment or statement released by the Filipino digital solutions firm about a ransomware attack on their systems. Upon analysis, the company’s official website (sxi.com.ph) is still operational and shows no signs of disruption from malicious actors.
Aside from the deadline timer, LockBit did not share how much data they had stolen from SXI. It also has not been revealed which data were stolen, except for a threat of a data leak that is supposed to happen 14 days as of this article, should the company fails to comply with the group.
LockBit’s notoriety in the cybercrime ecosystem has long been proven to pose grave threats among its victims. As SXI becomes one of the alleged victims of the ransomware group, security experts are concerned about its effect on the company and its clients should it soon lead to a data leak.
LockBit also continued to be one of the most active threat groups of this time, with our threat researchers in iZOOlogic uncovering some of its activities. Last March 30, an Indian enterprise ‘Mangala Group’ was added as a victim of LockBit’s cyber security attacks, alongside two other Indian companies ‘Precision Group’ and ‘DEMECH.’
