Canada's London Drugs confirms ransomware attack after LockBit demands $25M

London Drugs suffered a LockBit ransomware attack on April 28 that forced the temporary closure of 79 stores; the gang claims to have exfiltrated corporate files potentially containing employee information and demanded up to $25 million. London Drugs says it is unwilling and unable to pay, has notified employees, will provide two years of credit monitoring, and is investigating the extent of the compromise while law enforcement actions have recently disrupted parts of LockBit's infrastructure.