Powered by MOMENTUM MEDIA
cyber daily logo

Powered by MOMENTUMMEDIA

Breaking news and updates daily. Subscribe to our Newsletter

Exclusive: Aussie manufacturer Clutch Industries confirms cyber incident

The Lynx ransomware gang claims to have stolen 350 gigabytes of data from an Australian auto manufacturer.

user icon David Hollingworth
Tue, 21 Jan 2025
Exclusive: Aussie manufacturer Clutch Industries confirms cyber incident
expand image

An Australian auto parts manufacturer confirmed it was the victim of a cyber attack, days after the Lynx ransomware gang listed the company as a victim on its darknet leak site.

“Following a recent cyber incident, Clutch Industries has become aware that a third party has named the company online alongside some data,” a company spokesperson told Cyber Daily.

“We are working as a priority to confirm what information may have been impacted. At this stage of our investigation, we believe that the data potentially impacted was generally internal company and operational information. If we detect that personal/sensitive information has been impacted, we will contact affected parties, in line with our obligations.”

Clutch Industries said it has notified the Australian Cyber Security Centre and has upgraded its security to prevent any further incidents.

“We understand this news may cause concern to our stakeholders, and we thank them for their ongoing support as we work to resolve this as swiftly as possible,” the company spokesperson said.

Lynx listed Clutch Industries as a victim on 19 January, claiming to have stolen 350 gigabytes of data. According to the gang, the data includes user and business data, employee information, and financial details.

The gang also said it had “other data, which is not specified yet and were taken from different shares and personal folders”.

The data was published overnight and appears to include shared user folders, purchasing and stock data, engineering data, and sales and marketing information. There seems to be limited, if any, personal data involved.

Lynx is a relatively new ransomware operation, having claimed its first victim in July 2024 and listing 113 victims since then. The gang’s most recent Australian victim before listing Clutch Industries was Novati Constructions, which Lynx claimed to have hacked on 13 January.

The group utilises double extortion tactics, first encrypting a victim’s data and then threatening to publish that data if payment is not forthcoming.

Clutch Industries is based in Coburg North in Victoria and is a “full-service clutch manufacturer”. The company has a large R&D department and has distribution centres in Melbourne, Sydney, Perth, Brisbane, and New Zealand, as well as in the UK and US.

David Hollingworth

David Hollingworth

David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.

You need to be a member to post comments. Become a member for free today!

newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.