Back to the archive
Incident file · 2023
Royal Mail
Postal & logistics · United Kingdom · Threat actor: LockBit
Ransomware
Ransom refused
- US$80.0m
- Ransom demanded
- No
- Ransom paid
- 41 days
- Estimated downtime
- US$12m
- Est. revenue lost
What happened
LockBit encrypted systems supporting international export, halting overseas parcel and letter dispatch.
How it ended
Refused an US$80m demand; negotiation transcripts leaked and services were restored progressively over six weeks.
Data affected
Export operations
Sources and further reading
Would your business survive this incident?
We stress-test detection, response and recovery so a ransom demand is never your only option.