LG Energy Solution, a South Korean battery manufacturer specializing in lithium-ion batteries for electric vehicles (EVs) and energy storage systems, suffered a ransomware attack at one of its overseas facilities. The Akira ransomware group claimed responsibility, alleging the theft of 1.7TB of data, including employee records (visas, US/Korean passports, medical documents, Korean ID cards, addresses, phones, emails) and corporate documents (confidential projects, NDAs, financials, client/partner information, contracts). The impacted facility was restored to normal operations, but the stolen data—if verified—poses risks of phishing attacks, black-market sales, or further exploitation. The headquarters and other facilities remained unaffected, though investigations are ongoing. The breach’s scale and the sensitivity of the leaked employee and corporate data heighten concerns over financial fraud, reputational damage, and operational disruptions.

LG Energy Solution, a South Korea-based subsidiary of LG and one of the world’s largest battery manufacturers (earning $17.5 billion in 2024), confirmed a ransomware attack targeting a specific overseas facility. The Akira ransomware gang claimed responsibility, asserting they stole 1.7 terabytes of data, including corporate documents and employee databases. While the headquarters and other facilities remained unaffected, the incident disrupted operations at the targeted site, requiring recovery measures before normal functionality resumed. The FBI had previously flagged Akira for its aggressive tactics, noting over $244 million in ransom proceeds and disruptions across critical sectors like manufacturing, hospitals, and schools. The attack underscores the growing threat to battery suppliers, following similar incidents like Varta AG’s weeks-long outage in 2023 and a $60 million theft from another key material supplier in 2024. LG is conducting investigations but has not disclosed further details about the breach’s scope or potential ransom demands.