Lockbit5 claims data breach against collinscomputing.com

• Ransomware group: Lockbit5
• Country: United States
• Sector: Technology
• Announcement date: December 31, 2025

Lockbit5 claims data breach against collinscomputing.com

The Lockbit5 ransomware group has listed the technology company collinscomputing.com on its leak site, alleging a data breach. The group claims to have gained access to the organization's systems and has published an announcement regarding the incident.

Details of the alleged attack

According to the announcement published by the Lockbit5 ransomware group, the group has claimed to have compromised data belonging to collinscomputing.com. The post includes information regarding the operations of the company and provides a link to what is allegedly stolen data. The group states that it created this entry in late 2025, and the claim suggests that the group gained access to the organization's internal systems.

Ransomware groups often utilize leak sites to apply pressure on victims through a tactic known as double extortion. In such scenarios, threat actors not only encrypt an organization's data to disrupt operations but also threaten to release sensitive information publicly if a ransom is not paid. This method aims to maximize the leverage held by the attackers by threatening the victim's reputation and legal standing.

Information regarding the leaked data

Regarding the specific nature of the information involved in this incident, there is no specific detail regarding the nature of the leaked data in the announcement or the provided records. The listing names no specific data types.

About collinscomputing.com

Collins Computing is an accounting software and business management systems provider specializing in Acumatica Cloud ERP solutions. The company offers consulting and technical support services to businesses for their digital transformation and enterprise resource planning processes.

Analysis and potential implications

This alleged breach suggests that sensitive commercial and financial data may be at risk, given the company's provision of ERP and accounting software solutions. Because the organization provides critical business management and accounting tools, the integrity and confidentiality of the data they handle are paramount to their clients' operations.

As a US-based entity, a potential data breach could trigger legal processes under state-level data protection laws and sectoral regulations. Organizations operating in the technology and service sectors must often navigate complex regulatory landscapes to ensure compliance following a security incident. Furthermore, the past activities of the Lockbit group suggest that the leaked data could be utilized in secondary attacks or targeted phishing campaigns. Such campaigns often use stolen information to craft highly convincing messages to deceive employees or clients.

Supply chain risks may arise for the company's clients and business partners; therefore, it may be advisable for relevant parties to review their security measures. When a service provider is targeted, the downstream impact can extend to every organization that relies on their software and consulting services. Defensive measures typically include implementing robust multi-factor authentication, maintaining rigorous patch management, and conducting regular security audits to identify vulnerabilities before they can be exploited.

LockBit is a ransomware group known to have been active since 2019, and reports indicate it has continued operations with a new version following infrastructure disruptions in February 2024.