Lockbit5 ransomware group lists asiapacificex.com on its leak site
The LockBit ransomware group has listed asiapacificex.com on its leak site, claiming to have obtained 500 GB of data.
- Published
- 2 min read
- 2 min read
- Ransomware group: Lockbit5
- Country: Hong Kong SAR China
- Sector: Financial Services
- Announcement date: December 7, 2025
Lockbit5 claims data breach at asiapacificex.com
The Lockbit5 ransomware group has listed asiapacificex.com on its dedicated leak site, claiming to have successfully exfiltrated a significant amount of data from the organization. According to the announcement made on December 7, 2025, the threat actor group asserts they have obtained 500 GB of information belonging to the entity.
The group's announcement specifies a deadline of December 19, 2025, for the publication of the stolen data. Lockbit5 is a ransomware group that has been active since 2019. It is noted that the group reportedly underwent a restructuring following operational disruptions that occurred in February 2024.
Details regarding the alleged data theft
While the group has claimed a data volume of 500 GB, the announcement does not provide specific details regarding the nature or the exact contents of the data stolen. The listing currently names no specific data types.
In the announcement provided by the group, a screenshot was included, which displays a legal disclaimer text taken from the organization's own website. No specific information regarding a ransom demand was provided in the leak site listing.
About Asia Pacific Exchange
Asia Pacific Exchange (APEX) is a derivatives exchange based in Hong Kong. The organization provides specialized trading services for commodity and financial futures contracts.
Analysis and potential impact
The alleged data leak may pose a significant risk of exposure for financial data and customer information held by asiapacificex.com. Because the entity is based in Hong Kong, any potential data breaches could be subject to local data protection regulations governing the region.
Given the known tactics of the Lockbit group, it is possible that the leaked data could be utilized in secondary attacks, identity theft, or targeted phishing campaigns. The organization's operation within the financial services sector suggests that double extortion tactics may be employed by the attackers to increase pressure on the victim. Double extortion is a common ransomware strategy where attackers not only encrypt an organization's data but also threaten to leak sensitive information to pressure the victim into paying the ransom.
In such scenarios, the threat to operational continuity is high. Organizations in the financial services sector often implement various defensive measures to mitigate these risks, such as robust encryption, multi-factor authentication, and strict access controls to protect sensitive client and market data.