Lockbit5 claims data breach at bassignanicave.it

• Ransomware group: Lockbit5
• Country: Italy
• Sector: Agriculture and Food Production
• Announcement date: March 30, 2026

The Lockbit5 ransomware group has claimed to have published data belonging to the Italian organization bassignanicave.it on its dedicated leak site. This announcement, made on March 30, 2026, follows a period of alleged unauthorized access to the company's systems.

Details of the alleged attack

According to the information provided by the threat actor, the incident involving bassignanicave.it is claimed to have occurred on March 10, 2026. The Lockbit5 group subsequently listed the organization on its leak site on March 12, 2026.

In their announcement, the group alleges that they have successfully compromised the institution's data. To support their claim of a successful breach, the group has provided nine separate links intended to lead to the alleged leaked information. This method is a common tactic used by ransomware groups to pressure victims by demonstrating that they have successfully exfiltrated sensitive information.

Data involved in the incident

Regarding the specific nature of the information involved in this incident, there is no specific detail provided in the available screenshots or the registration information. The listing names no specific data types.

About bassignanicave.it

Bassignani is a family-owned company that has been operating in Italy since the late 1950s. The organization specializes in several industrial and agricultural areas, specifically focusing on gravel and sand quarrying as well as agriculture and food production.

Impact and security assessment

The actions taken by the Lockbit5 group may have significant negative consequences for the institution. Such an event can negatively impact the organization's operational continuity and its commercial reputation. Because the entity is based in Italy, the situation carries legal implications; if the leaked data contains personal information, legal sanctions under the General Data Protection Regulation (GDPR) could arise.

Furthermore, the breach presents secondary risks to the institution's stakeholders. Customers and employees of the organization may face potential threats such as identity theft or targeted phishing attacks resulting from the exposure of their information.

Lockbit5 is a Ransomware-as-a-Service (RaaS) group that has been tracked since 2019. It is reported that the group returned with a new version of its malware after its infrastructure was disrupted in February 2024. It is important to note that the accuracy and the full scope of the data in question have not yet been verified by independent sources.

In general, ransomware attacks often involve a