Lockbit5 claims data breach against camorim.com.br

• Ransomware group: Lockbit5
• Country: Brazil
• Sector: Retail & E-Commerce
• Announcement date: September 29, 2026

Lockbit5 lists camorim.com.br on leak site

The Lockbit5 ransomware group has listed camorim.com.br on its leak site, alleging a data breach. This announcement, made on September 29, 2026, follows the group's claims of a targeted cyberattack against the organization.

Details of the alleged attack

According to the claims made by the Lockbit5 group, the activities targeting camorim.com.br occurred on September 28, 2026. The group added the organization to its leak platform on September 29, 2026. While the listing is active, the provided evidence consists of a generic entry screen from the Ransomware.live platform. This screenshot does not contain specific evidence or files related to the breach, serving only as a generic interface used to access the leak site.

Data involved in the claim

At this stage, there is no information provided regarding the content of the leaked data. The listing does not specify the types of data involved, the total size of the data, the file count, or any ransom demand. The current evidence remains limited to the generic interface of the leak site platform.

Risk assessment and implications

The Lockbit5 group is a ransomware actor that has been active since 2019 and reportedly updated its infrastructure in February 2024. The claim that the organization's data has been leaked may pose a risk of exposing personal information of employees or customers. Because the organization operates in Brazil, a potential data breach could trigger legal processes under the LGPD (General Data Protection Law).

If the claims are verified, the organization's commercial reputation may be harmed, and the risk of secondary attacks could increase. Ransomware attacks often involve double extortion, where threat actors not only encrypt an organization's data but also threaten to leak sensitive information to pressure the victim into paying a ransom. This tactic significantly increases the pressure on companies to comply with demands.

General defensive considerations

Organizations facing such claims often focus on several defensive and reactive steps. These include conducting thorough forensic investigations to determine the scope of the breach, implementing enhanced monitoring to detect further unauthorized activity, and reviewing access controls to prevent lateral movement within the network. Furthermore, maintaining robust backup strategies and ensuring compliance with local data protection regulations, such as the LGPD, are critical components of a modern cybersecurity posture. As these types of threats evolve, the risk of secondary attacks, such as phishing or social engineering targeting the leaked data, remains a significant concern for businesses in the retail and e-commerce sectors.