Skip to content
Ransomware

Dece.cz listed on Lockbit5 ransomware leak site

DeCe COMPUTERS s.r.o. (dece.cz), operating in the technology sector, has been listed on the leak site of the LockBit ransomware group.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Lockbit5
  • Country: Czechia
  • Sector: Technology
  • Announcement date: August 27, 2026

The Lockbit5 ransomware group has officially listed the Czech-based technology firm DeCe COMPUTERS s.r.o. (dece.cz) on its dedicated leak site. This announcement, made on August 27, 2026, serves as a public claim by the threat actor group regarding a successful breach of the organization's digital environment.

The claimed attack and event details

According to the announcement published by the Lockbit5 group, the organization was allegedly subjected to a cyberattack on May 25, 2026. By listing the company on their leak site, the group asserts that they have successfully gained unauthorized access to the institution's internal systems. This type of public listing is a common tactic used by ransomware groups to exert pressure on their targets, often involving a double extortion model where data is not only encrypted but also stolen to be used as leverage.

In such scenarios, threat actors typically aim to maximize pressure by threatening to release sensitive information if specific demands are not met. While the group has asserted their access to the systems, the timeline between the alleged initial attack in May and the public listing in August highlights a significant period of unauthorized presence within the network.

Details regarding the leaked data

Despite the public claim of a breach, the specific details regarding the stolen information remain limited. At this stage, the nature of the alleged leaked data has not been disclosed by the attackers. The only evidence provided by the group is a screenshot that displays only a landing page, offering no insight into the specific files or databases that may have been compromised.

  • No specific data types have been named in the listing.

Because the group has not provided a specific file count, data size, or a list of compromised categories, the full extent of the potential information loss remains unknown to the public and the organization.

About DeCe COMPUTERS s.r.o.

DeCe COMPUTERS s.r.o. is a professional IT company based in Czechia. The firm provides a wide range of services to its corporate clients, including comprehensive computer systems, office management solutions, and various IT infrastructure services. As an entity operating within the technology sector, the firm plays a role in the digital operations of its various corporate clients.

Impact assessment and industry implications

The situation involving DeCe COMPUTERS s.r.o. presents several significant risks. First, the incident may have a negative impact on the institution's operational continuity. Furthermore, depending on the actual content of the leaked data, there is a risk of identity theft or the occurrence of targeted phishing attacks if employee or customer information is exposed. As a Czech-based institution, any confirmed data breaches may lead to legal sanctions under the General Data Protection Regulation (GDPR).

The threat posed by Lockbit5 is notable; the group has been tracked since 2019 and is reported to have returned with a new version of their malware after their infrastructure was disrupted in February 2024. This evolution demonstrates the persistence of such groups in the cyber threat landscape. Additionally, secondary risks may arise for the institution's supply chain partners, as a breach in a technology provider can create a ripple effect throughout its client network.

For organizations in the technology and IT services sector, maintaining robust defensive postures is essential. This includes implementing strict access controls, maintaining comprehensive logging to detect unauthorized system access, and ensuring that data encryption is applied to sensitive information at rest and in transit. Given the potential for secondary risks to supply chain partners, organizations must prioritize the security of their infrastructure to prevent them from becoming a vector for larger-scale attacks.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories