Lockbit5 claims data breach at cadopt.com

• Ransomware group: Lockbit5
• Country: India
• Sector: Technology
• Announcement date: December 7, 2025

The LockBit ransomware group has listed cadopt.com on its leak site, alleging a data breach against the organization. This announcement, published on the group's dedicated leak portal, marks a new development in the ongoing activities of the threat actor group.

Details of the claim

The LockBit group added cadopt.com to its target list via an announcement published on its leak portal. The post includes a brief description of the company's operations but does not provide any data samples or file content. According to the claim, the attack took place on November 5, 2025. The threat actor has threatened to publish the company's data by December 21, 2025.

Data involved in the alleged breach

Regarding the content of the alleged breach, there is no information or sample files provided in the announcement regarding the type or content of the allegedly leaked data. The listing does not provide any details regarding the specific data types, the size of the data, or the file count involved in the incident.

Organization profile

CADOpt Technologies is a technology company specializing in engineering solutions and software services, particularly in CAD/CAM/CAE and Product Lifecycle Management (PLM). Based in India, the firm operates as the exclusive partner of iSEEK Corporation.

Risk assessment and industry implications

The LockBit group is a RaaS (Ransomware-as-a-Service) entity active since 2019, which reportedly restructured following infrastructure disruptions in February 2024. Ransomware-as-a-Service models allow developers to lease their malicious software to affiliates, who then carry out the actual attacks, often employing double extortion tactics. In double extortion, attackers not only encrypt an organization's data but also threaten to leak sensitive information on a public site to pressure the victim into paying the ransom.

The potential leakage of company data may lead to the infringement of intellectual property rights and the exposure of trade secrets. Given that the company is based in India, potential data breaches may trigger legal processes under local data protection regulations. Secondary risks may include the potential use of leaked data for identity theft or targeted phishing attacks.

Organizations operating in the technology and engineering sectors often face significant risks when targeted by ransomware groups. The loss of proprietary engineering data, such as CAD/CAM/CAE files or PLM information, can compromise competitive advantages and intellectual property. To mitigate these risks, organizations typically implement defensive measures such as robust backup strategies, multi-factor authentication, and continuous monitoring of network traffic to detect unauthorized access or data exfiltration attempts.