Subway Puts a LockBit Investigation on the Menu

LockBit 3.0 claims it exfiltrated Subway's SBS internal system — allegedly hundreds of gigabytes of franchise and financial data — and threatened to publish or sell the data if a ransom is not paid; Subway says it is investigating the claim but has not confirmed the breach. The report notes LockBit's significant presence in global ransomware activity, observes that this target may be atypical for the group, and lists recommended mitigations such as MFA, backups, segmentation, patching, monitoring, and incident response planning.