Lockbit5 claims data breach against omf.org

• Ransomware group: Lockbit5
• Country: United States
• Sector: Professional Services
• Announcement date: December 26, 2025

Lockbit5 claims a data breach against omf.org

The Lockbit5 ransomware group has recently listed omf.org on its dedicated leak site, claiming to have successfully executed a data breach against the organization. This announcement, posted on December 26, 2025, marks a new development in the ongoing targeting of professional services by high-profile ransomware actors. While the claim has been made publicly on the group's platform, the incident remains a claim by the threat actor.

Details of the claimed attack

According to the information published by the ransomware group, the attack is claimed to have occurred on May 10, 2025. The listing on the leak site includes a brief description of the organization's activities and features a countdown timer. This timer is a common tactic used by ransomware groups to create a sense of urgency and psychological pressure on the target. By initiating a countdown for the potential release of stolen information, the group attempts to coerce the organization into meeting their demands through the threat of public data exposure.

This method is a hallmark of modern ransomware operations, often referred to as double extortion. In such scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive data. The threat of leaking this data on a public forum serves as a powerful lever to increase the likelihood of a ransom payment, as the organization faces significant reputational and legal risks if the information is released.

Information regarding the compromised data

Regarding the specific contents of the alleged breach, the listing provides no detailed information regarding the nature of the compromised or threatened data. The group has not specified the types of files involved, the volume of information taken, or the specific databases accessed. Consequently, the exact scope of the data at risk remains unknown at this time.

About omf.org

OMF International (Overseas Missionary Fellowship) is an international Christian missionary organization focused on serving the peoples of East Asia. Headquartered in Singapore, the organization provides religious and social support to communities across the region. The organization's operations involve significant engagement with various communities, which often necessitates the handling of sensitive information related to its mission and supporters.

Analysis and potential implications

Lockbit5 is a known ransomware-as-a-service (RaaS) group that has been active since 2019. The potential exposure of data in a breach of this nature could lead to various secondary risks. For an organization like OMF International, the disclosure of information could potentially impact donor or member information. Because the organization is based in the United States, any confirmed data breach may fall under the purview of state-level privacy laws and federal regulations, which mandate specific notification procedures and compliance standards.

Given the historical tactics employed by this group, the publication of stolen data could cause significant damage to an organization's reputation and may facilitate targeted phishing attacks against its members or stakeholders. Such attacks often leverage the stolen information to craft highly convincing fraudulent communications.

In the professional services sector, organizations often implement various defensive measures to mitigate these risks. These typically include robust data encryption, multi-factor authentication, and continuous monitoring of network traffic to detect unauthorized access. Furthermore, maintaining a comprehensive incident response plan and conducting regular security awareness training are essential components of a modern cybersecurity posture. Until the full scope of the breach is clarified, uncertainties regarding the organization's operational continuity may persist.