aqhch.com.cn listed on Lockbit5 leak site

• Ransomware group: Lockbit5
• Country: China
• Sector: Manufacturing
• Announcement date: December 7, 2025

The Lockbit5 ransomware group has officially listed aqhch.com.cn, known as Heng Chang Machinery Co., Ltd, on its dedicated leak site. This announcement, posted on December 7, 2025, follows a claimed attack date of April 12, 2025, signaling a significant potential compromise for the manufacturing firm.

The details of the claim

According to the announcement published by the Lockbit5 group, the organization aqhch.com.cn has been targeted in a cyberattack. The group claims that data belonging to the company has been compromised during the incident. In line with common ransomware extortion tactics, the group has set a deadline for the potential release of the stolen information. The group has announced that the data may be released on December 19, 2025, if their demands are not met.

Ransomware groups often utilize leak sites to apply pressure on victims through a method known as double extortion. In this scenario, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive data to threaten its public disclosure. By threatening to publish the information, the threat actors aim to increase the likelihood of receiving a ransom payment. The use of a countdown or a specific deadline is a hallmark of this psychological pressure tactic.

Data involved in the incident

Regarding the specifics of the breach, there is no information in the record or the screenshot regarding the nature or content of the allegedly compromised data. The listing does not specify the volume of files or the total size of the data involved, nor does it mention a specific ransom demand. The listing names no data types.

Organization profile

Heng Chang Machinery (HCH) is a professional manufacturing company that has been in operation since 1988. The company specializes in the production of bearings and maintains global operations. Its primary focus involves the development and manufacturing of high-precision bearings and related components designed for various industrial applications. The company's expertise in specialized production lines also includes hygiene products.

Risk assessment and industry implications

The actions taken by the Lockbit5 group pose a significant risk to the operational continuity of Heng Chang Machinery. Depending on the nature of the data that may have been accessed, there is a possibility that sensitive information, such as corporate trade secrets or employee records, could be disclosed. For a manufacturing entity, the loss of proprietary technical specifications or production methodologies can have long-term consequences for competitive advantage.

Furthermore, as the company is based in China, a potential data breach may trigger legal processes under local data protection regulations. Organizations operating in the manufacturing sector must be aware that such incidents can lead to regulatory scrutiny and legal liabilities. Secondary risks associated with such breaches include the potential use of leaked data for identity theft or targeted phishing attacks against the company's employees or business partners.

Lockbit is a Ransomware-as-a-Service (RaaS) group that has been tracked since 2019. It is reported that the group returned with a new version after its infrastructure was disrupted in February 2024. To mitigate these types of risks, organizations in the manufacturing sector often implement defensive strategies such as robust backup solutions, network segmentation, and continuous monitoring of their digital infrastructure to detect unauthorized access early.