Lucchini Group

Lucchini Group is an Italian metal manufacturing company.
Its headquarters are located in Italy.

On December 4, 2022, Lucchini Group experienced a ransomware attack carried out by the Bl00dy gang.
The attackers encrypted the company's servers and delivered a ransom note via Telegram.
The note imposed a seven‑day deadline for payment and warned against independent recovery attempts.
The Bl00dy group claimed that any unauthorized recovery could trigger backdoor infections leading to permanent data loss.
Payment was demanded in exchange for decryption tools to restore access to the encrypted data.
The incident highlighted the operational disruptions that can result from ransomware encryption of critical systems.
It also raised concerns about potential data integrity risks stemming from persistent network compromises.

Bl00dy is described as an offshoot of the LockBit ransomware family, leveraging a leaked malware builder.
The group employs evolving tactics, frequently switching ransomware variants to evade detection.
Their malware incorporates functionalities from multiple malware families, increasing its versatility.
The attack on Lucchini Group illustrates how manufacturing firms are increasingly targeted by ransomware operators.
Such incidents underscore the importance of robust cybersecurity measures in industrial environments.
Companies in the metal manufacturing sector must consider both preventive defenses and incident response planning.