d-klima.cz listed on LockBit5 leak site following claimed data breach
The LockBit5 ransomware group has listed d-klima.cz on its leak site, alleging a data breach.
- Published
- 2 min read
- 2 min read
- Ransomware group: LockBit5
- Country: Czechia
- Sector: Manufacturing
- Announcement date: December 26, 2025
The LockBit5 ransomware group has listed the Czech-based company d-klima.cz on its dedicated leak site. The threat actor group has issued a claim alleging that they have successfully compromised the organization's data, marking a new instance of targeted extortion activity against a specialized industrial service provider.
The details of the claim
According to the announcement posted on the group's leak portal, the LockBit5 group claims to have gained unauthorized access to the systems of d-klima.cz. The listing identifies the target as an entity providing HVAC (heating, ventilation, and air-conditioning) solutions. In the announcement, the group has set a deadline of January 15, 2026, regarding their demands.
The claim of a breach was officially announced on the group's leak site on December 26, 2025. While the group has asserted that they have compromised the organization's data, they have not provided specific details regarding the timeline of the initial intrusion, though the claim mentions an attack date of April 15, 2025.
Information regarding the leaked data
At this stage, the listing does not provide specific details regarding the nature or the volume of the data that has been targeted. The provided records and screenshots do not contain information regarding the specific types of files or the categories of information that the group claims to have exfiltrated.
- No specific data types were identified in the listing.
About d-klima.cz
D-klima is a company based in the Czech Republic. The organization specializes in heating, ventilation, and air-conditioning (HVAC) systems. Their professional scope includes providing various engineering and installation services specifically designed for climate control solutions.
Risk assessment and industry implications
This action by the LockBit5 group may pose significant risks to the operational continuity of the organization. Because d-klima.cz is based in the Czech Republic, any potential data breach could trigger legal obligations under the EU General Data Protection Regulation (GDPR), which governs how personal data must be protected and reported.
The exposure of sensitive information, such as employee or customer data, might create a foundation for identity theft or targeted phishing attacks. In modern ransomware campaigns, groups often employ a