Lockbit5 ransomware group lists laval-virtual.com on its leak site

• Ransomware group: Lockbit5
• Country: France
• Sector: Technology
• Announcement date: December 26, 2025

LockBit5 claims data breach at Laval Virtual

The LockBit5 ransomware group has officially listed the technology organization laval-virtual.com on its dedicated leak site. This announcement, made on December 26, 2025, follows an alleged attack that the group claims occurred on May 9, 2025. Through this listing, the threat actor group asserts that they have successfully compromised the organization and are threatening to release the stolen information publicly if their demands are not met.

Ransomware groups often utilize these leak sites as a tool for double extortion. In this model, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive data to use as leverage. By threatening to publish the information on a public platform, the attackers attempt to pressure the victim into paying a ransom to prevent the exposure of proprietary or private information. This tactic increases the pressure on the target organization, as the consequences of a public leak can extend far beyond immediate operational downtime.

Details of the alleged incident

According to the announcement posted on the LockBit5 leak portal, the target of the attack is laval-virtual.com. The group's listing indicates that the organization specializes in the fields of computer graphics and interactive 3D applications. The threat actors claim to have obtained data belonging to the organization and have issued threats regarding the public release of this information.

Regarding the specifics of the compromised information, the listing provides no details. There is no specific information provided in the listing or records regarding the nature of the data alleged to have been compromised. The group has not disclosed the total size of the data, the number of files involved, or the specific ransom amount they are demanding for the non-disclosure of the information.

About Laval Virtual

Laval Virtual is an international organization that focuses on virtual reality (VR) and augmented reality (AR) technologies. The organization serves as a central hub within its industry, bringing together industry professionals and innovative solutions through its annual events and its broader technology ecosystem.

Potential implications and industry context

The actions taken by the LockBit5 group could lead to significant operational disruptions and potential data privacy breaches for the organization. Because Laval Virtual is based in France, any confirmed data breach could result in legal repercussions and administrative fines under the GDPR (EU General Data Protection Regulation). The potential exposure of customer or employee data may increase the risk of secondary threats, such as identity theft and targeted phishing campaigns.

LockBit is a Ransomware-as-a-Service (RaaS) group that has been monitored by security researchers since 2019. Following significant infrastructure disruptions in February 2024, the group has reportedly resumed its operations using a new version of its malware. This resilience highlights the ongoing challenge posed by sophisticated RaaS models that can adapt to law enforcement interventions.

For organizations operating within the technology and digital innovation sectors, maintaining robust defensive postures is critical. Common defensive steps include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular offline backups. Furthermore, organizations often focus on network segmentation to prevent lateral movement by attackers and implement continuous monitoring to detect unauthorized access to sensitive environments early in the attack lifecycle.