habeshacement.com listed by the lockbit3 ransomware group

Overview

On 9 October 2024, the LockBit 3.0 ransomware group added Habesha Cement Share Company to its leak site. Habesha Cement is an Ethiopian cement manufacturer incorporated in September 2008, with production operations serving the domestic construction market. The group announced the company as a new victim in a post on its blog.

What was published

LockBit 3.0's announcement identified Habesha Cement by name and company description but did not provide a record count or data inventory. The group's standard procedure is to threaten publication of exfiltrated files after a countdown. No data sample from Habesha Cement was observed on the leak site.

Risks for affected individuals

Employees, distributors and suppliers of Habesha Cement could be affected if personnel records, financial statements or commercial contracts were exfiltrated. Such data can be used for phishing, invoice fraud and impersonation of company officials.

What remains unknown

The categories and volume of stolen data, and whether LockBit 3.0 released any files after the listing, remain unconfirmed. Habesha Cement has not issued a public statement detailing the incident or the response measures taken.

What affected people should do

Company staff should change passwords and enable multi-factor authentication on business accounts. Distributors and suppliers should verify payment instructions through known official contacts before transferring funds, and report any suspicious email referencing Habesha Cement.