Eroselevators.com listed on Lockbit5 ransomware leak site

• Ransomware group: Lockbit5
• Country: India
• Sector: Manufacturing
• Announcement date: December 31, 2025

Lockbit5 claims data breach at eroselevators.com

The Lockbit5 ransomware group has listed the Indian manufacturing company eroselevators.com on its dedicated leak portal. According to the announcement posted on December 31, 2025, the group alleges that they have successfully carried out a cyberattack against the organization, resulting in a data breach.

Ransomware groups often utilize leak sites as a method of double extortion. In these scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also exfiltrate sensitive data to use as leverage. By threatening to publish this information publicly, the threat actors attempt to pressure the victim into paying a ransom to prevent the exposure of their proprietary or personal information.

Details of the alleged incident

The announcement made by the Lockbit5 group indicates that the compromise of eroselevators.com occurred in November 2025. The group claims to have exfiltrated data belonging to the company during this period. However, the group has not provided specific details regarding the nature or the content of the allegedly leaked data. Furthermore, no information has been provided regarding the total size of the data stolen or the specific number of files involved in the breach.

The listing names no specific data types that have been compromised.

About eroselevators.com

Eros Elevators is a well-established manufacturing and service company operating within the Indian elevator industry. Established in 1947, the company has a long-standing presence in the sector. They specialize in several key areas, including the design, manufacturing, installation, and maintenance of various elevator systems.

Risk assessment and implications

The claim made by the Lockbit5 group may pose significant risks to the organization's operational continuity and its commercial reputation. If the leaked data were to include sensitive information such as employee or customer details, it could trigger legal processes under Indian data protection regulations. Such breaches often create secondary risks for the victim organization and its stakeholders, including the potential for identity theft or the launch of targeted phishing attacks against the company's contacts.

Lockbit5 is a known ransomware group that has been active since 2019. The group has demonstrated persistence by continuing its operations through the regular updating of its infrastructure. This ongoing activity highlights the necessity for organizations to maintain a proactive security posture. To defend against such threats, it is often advisable for organizations to re-evaluate their network security measures and implement robust monitoring to detect unauthorized data exfiltration.

In the manufacturing sector, maintaining the integrity of design specifications and client service records is critical. When a breach is claimed, organizations typically focus on incident response to determine the scope of the intrusion and to mitigate any potential impact on their supply chain and service delivery capabilities.