Skip to content
Ransomware

Lockbit5 ransomware group lists primelinkbio.com on its leak site

The LockBit ransomware group has listed the biotechnology firm primelinkbio.com on its leak site.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Lockbit5
  • Country: United States
  • Sector: Healthcare
  • Announcement date: June 20, 2026

LockBit5 claims data breach at primelinkbio.com

The LockBit5 ransomware group has listed the biotechnology firm primelinkbio.com on its dedicated leak site. According to the announcement made by the threat actor, the organization has been targeted in a cyberattack, and the group alleges that it has successfully obtained data belonging to the company.

Ransomware groups often utilize leak sites to apply pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information. If the ransom is not paid, the group threatens to publish the stolen data on these public platforms to cause reputational damage, legal consequences, or the loss of intellectual property. This method increases the leverage held by the attackers during negotiations.

Details of the alleged attack

The announcement regarding primelinkbio.com was posted on the group's leak site on June 20, 2026. While the listing was made in June, the group claims that the actual attack against the organization took place on March 11, 2026. This gap between the initial intrusion and the public announcement is a common occurrence in ransomware operations, as attackers may take time to exfiltrate data and conduct their extortion process before going public.

Regarding the specifics of the breach, the group has not provided any details regarding the content of the leaked data. Furthermore, the image attached to the leak site announcement does not provide any specific content or evidence of the stolen files. The listing names no specific data types that have been compromised.

PrimeLink BioTherapeutics is an innovative biotechnology company that focuses on antibody-drug conjugate (ADC) technologies. The company's core mission involves conducting research and development for targeted drug therapies, specifically within the field of cancer treatment.

Potential implications and sector risks

The involvement of a biotechnology firm in the healthcare sector introduces significant risks following a data breach. Because of the nature of the organization's work, the leaked data may contain sensitive research findings or personal health information. For an organization located in the United States, such a situation could lead to legal sanctions and significant compliance issues under regulations such as HIPAA.

The publication of an organization's data can lead to various secondary risks. These include the potential for identity theft or the unauthorized disclosure of critical intellectual property. In the biotechnology sector, the loss of research data can represent a catastrophic blow to a company's competitive advantage and long-term strategic goals.

LockBit is a well-known ransomware actor that has been active since 2019. Despite various law enforcement actions, the group continues its operations by renewing its infrastructure to maintain its presence in the cybercrime ecosystem. Organizations facing such threats typically focus on defensive measures such as implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security audits to mitigate the impact of potential intrusions.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

Related stories