Lockbit5 ransomware group lists columbiaorthogroup.com on its leak site

• Ransomware group: Lockbit5
• Country: United States
• Sector: Healthcare
• Announcement date: June 11, 2026

Lockbit5 claims data breach at Columbia Orthopaedic Group

The Lockbit5 ransomware group has listed the healthcare provider columbiaorthogroup.com on its dedicated leak site. According to the announcement made on the group's platform, the organization has been targeted in a cyberattack that allegedly resulted in a data breach.

The threat actors behind the Lockbit5 group claim to have successfully gained unauthorized access to the systems belonging to the organization on May 17, 2026. This initial access preceded the formal announcement on the leak site, which occurred on June 11, 2026. The group alleges that sensitive data belonging to the organization has been compromised during this period of unauthorized access.

Details regarding the alleged data compromise

While the threat actors have officially listed the organization on their platform, they have not provided specific details regarding the nature or the volume of the allegedly compromised data. No information has been released concerning the total size of the data or the specific number of files involved in the incident. Furthermore, no ransom demand has been publicly stated in the current listing.

The available evidence provided by the group consists of a screenshot of the general landing page of the leak site. This screenshot does not contain any specific data samples or individual files related to the organization, making it impossible to verify the contents of the alleged breach through the provided materials.

About Columbia Orthopaedic Group

Columbia Orthopaedic Group is a healthcare provider based in mid-Missouri. The organization specializes in orthopedics and the treatment of various musculoskeletal conditions, serving patients within its specialized medical field.

Risk assessment and industry implications

The targeting of a healthcare provider presents significant risks. Given that the organization operates within the healthcare sector, a potential data breach may pose substantial risks regarding patient privacy and compliance with HIPAA regulations. The exposure of personal health information can lead to severe consequences for individuals, including the risk of identity theft and the potential for patients to be targeted by sophisticated phishing attacks.

Lockbit5 is identified as a Ransomware-as-a-Service (RaaS) entity that has been tracked since 2019. The group reportedly resumed its operations following a disruption that occurred in February 2024. This group frequently employs double extortion tactics, a method where attackers not only encrypt an organization's data but also threaten to publish sensitive information on a leak site to increase pressure on the victim.

The use of double extortion tactics creates a high risk of data publication, even if an organization manages to restore its systems from backups. For organizations in the healthcare sector, maintaining operational continuity is a primary concern, and such attacks can negatively impact the ability to provide consistent medical services. To mitigate such risks, organizations typically focus on robust data protection strategies, continuous monitoring of network traffic, and strict adherence to regulatory frameworks to safeguard sensitive patient information.