The notorious LockBit ransomware gang is claiming it stole data from SpaceX by infiltrating a third-party supplier.
The ransomware group is alleging it pilfered the data by targeting Maximum Industries, a Texas-based company that offers waterjet and laser cutting services for large scale manufacturing.
Lockbit claims it looted “3,000 drawings” certified by SpaceX engineers. As proof, the gang’s website on the Dark Web has published a few of the stolen documents, including a drawing of what appears to be a Raptor V2 engine from the Elon Musk-led company.
“This document is confidential and proprietary to SpaceX,” the same document reads. Another file shows Maximum Industries signing a non-disclosure agreement with SpaceX.
LockBit plans on auctioning off the stolen drawings unless SpaceX pays up first. “Elon Musk we will help you sell your drawing to other manufacturers —build the ship faster and fly away,” the gang wrote in the posting.
LockBit’s website also claims it’ll leak more data stolen from SpaceX in about five days.
SpaceX and Maximum Industries didn’t immediately respond to a request for comment. So it’s unclear how Lockbit pulled off the hack, or whether the companies plan on paying the ransom. That said, it’s possible the ransomware gang stole documents of relatively little value from SpaceX.
In the meantime, LockBit — which is likely based in Russia— remains prolific. The group operates by selling access to its ransomware services to other cybercriminals. During the attacks, LockBit members will both encrypt the victim's computers and steal sensitive data, giving them two ways to extort funds.
Along with SpaceX, the gang’s website is currently threatening to leak data from two dozen other organizations. Past victim companies include Foxconn, Accenture and most recently the British postal service the Royal Mail.