Lockbit5 ransomware group lists kenta.com.br on its leak site

• Ransomware group: Lockbit5
• Country: Brazil
• Sector: Technology
• Announcement date: February 7, 2026

The LockBit5 ransomware group has announced the publication of data belonging to the Brazilian organization kenta.com.br on their dedicated leak site. This announcement follows a pattern of double extortion, a tactic where threat actors not only encrypt an organization's systems but also threaten to release sensitive information to pressure the victim into paying a ransom.

The claimed attack details

According to the announcement posted on the LockBit5 leak site on February 7, 2026, the threat actors claim to have successfully gained unauthorized access to the networks of kenta.com.br. The group asserts that this intrusion resulted in a data breach. While the announcement was made in early February, the threat actors claim that the actual incident and the initial compromise of the network took place on January 30, 2026.

Ransomware leak sites serve as a public stage for cybercriminal groups to exert pressure on their targets. By listing a company, these groups aim to damage the victim's reputation and create urgency. In many cases, these groups operate under a Ransomware-as-a-Service (RaaS) model, where developers provide the malicious tools to affiliates who carry out the actual attacks, allowing the criminal enterprise to scale its operations across various sectors and regions.

Data and content information

Regarding the specific content of the alleged breach, the leak announcement provides no details. There is no screenshot provided, and no detailed information has been released concerning the specific nature or the volume of the data involved in this incident. The listing names no specific data types that have been compromised.

Potential risks and secondary impacts

The claims made by the LockBit5 group may indicate the presence of potential vulnerabilities within the organization's data security processes. Because the organization serves high-stakes clients, the nature of the alleged leaked data could lead to secondary risks for the various entities they support. Specifically, the company provides services to government agencies and legal organizations, meaning any compromise could have downstream implications for these public and legal institutions.

Organization profile

Kenta Informática is a Brazil-based technology company. The firm specializes in providing information management and IT solutions, specifically catering to the needs of government agencies and legal organizations.

Analysis and industry implications

The situation involving Kenta Informática highlights the ongoing risks faced by technology providers that manage sensitive data for public sectors. Under Brazil's LGPD regulation, the organization may face specific data breach notification obligations, which could potentially lead to legal sanctions if compliance requirements are not met. The potential for legal and regulatory repercussions is a significant factor for companies operating within the Brazilian digital landscape.

LockBit5 is a RaaS group that has been active since 2019. The group has demonstrated resilience by continuing its operations through the continuous updating of its infrastructure. This persistence means that organizations must remain vigilant against evolving threats. When data is compromised, organizations often face risks such as targeted phishing campaigns or identity theft, as stolen information can be weaponized to target employees or the company's clients.

To mitigate such risks, organizations in the technology and information management sectors often implement defensive strategies. These include robust network monitoring to detect unauthorized access, strict identity and access management to limit the scope of a potential breach, and comprehensive encryption protocols for data at rest and in transit. Furthermore, maintaining a strong incident response plan is essential for managing the legal and operational fallout that follows a public claim of a data breach.