Lockbit5 ransomware group lists fresh2you.eu on its leak site

• Ransomware group: Lockbit5
• Country: Netherlands
• Sector: Agriculture and Food Production
• Announcement date: December 26, 2025

The LockBit5 ransomware group has listed the Dutch organization fresh2you.eu on its dedicated leak site. Through this listing, the threat actor group has alleged that a data breach has occurred involving the company's systems.

The claims made by LockBit5

According to the announcement made on the group's leak platform, LockBit5 claims to have targeted fresh2you.eu. The group alleges that they successfully gained access to the organization's internal systems. Following this unauthorized access, the group claims to have performed a data exfiltration process, moving sensitive information from the victim's network to their own controlled infrastructure.

This specific listing is part of a broader series of activities reported by the LockBit5 group throughout 2025. Ransomware groups often utilize these leak sites as a tool for double extortion, a tactic where attackers not only encrypt an organization's data to disrupt operations but also threaten to release stolen information publicly to increase pressure for ransom payments. By listing a victim on their platform, the group aims to damage the target's reputation and create public visibility for their extortion attempts.

Information regarding the leaked data

At this stage, there is no information available regarding the specific nature of the leaked or compromised data. The listing does not specify the types of files, the volume of data, or the specific databases that were allegedly accessed. Furthermore, the provided documentation consists of a screenshot displaying the general redirection page of the LockBit group and does not contain any specific data samples or evidence of the stolen content.

The listing names no data types.

Organizational profile

Fresh2You is a Dutch food company specializing in the import, export, wholesale, and Cash & Carry services of high-quality fruits and vegetables.

Potential impact and assessment

The claim made by the LockBit5 group may pose significant risks to the operational continuity of the organization. Because the organization is based in the Netherlands, a potential data breach could lead to various legal obligations under the GDPR (EU General Data Protection Regulation). Such regulations require organizations to manage and report data breaches to protect the privacy and rights of individuals.

If the allegations are verified, the organization's commercial reputation and supply chain processes may be negatively impacted. Furthermore, risks such as identity theft or targeted phishing attacks against employees and customers may be observed following such an event. When sensitive corporate or personal information is exfiltrated, attackers often use it to conduct highly convincing social engineering campaigns against the company's stakeholders.

LockBit is a Ransomware-as-a-Service (RaaS) group that has been tracked since 2019. It is reported to have returned with a new version after its infrastructure was disrupted in February 2024. This persistence highlights the ongoing threat posed by such groups to various sectors.

Organizations operating in the food production and wholesale sectors can take several defensive steps to mitigate these risks. Implementing robust access controls, such as multi-factor authentication, and maintaining regular, offline backups are fundamental practices. Additionally, monitoring for unauthorized data exfiltration and enhancing employee awareness regarding phishing attempts can help strengthen the overall security posture against evolving ransomware threats.