Lockbit5 ransomware group lists probat.com on its leak site

• Ransomware group: Lockbit5
• Country: Germany
• Sector: Manufacturing
• Announcement date: June 11, 2026

LockBit claims attack on Probat

The LockBit ransomware group has listed the German manufacturing company probat.com on its dedicated leak site. According to the announcement published on the group's digital platform, the threat actors claim to have successfully gained access to the organization's internal systems.

The listing was officially announced on June 11, 2026. While the announcement appeared on the leak site on that date, the threat actor claims the actual attack took place on June 9, 2026. This discrepancy between the date of the breach and the date of the public announcement is a common occurrence in ransomware operations, where attackers may take time to exfiltrate data or negotiate before going public.

Ransomware groups often use leak sites as a tool for double extortion. In these scenarios, attackers do not just encrypt a company's data to disrupt operations; they also steal sensitive information to use as leverage. By threatening to release stolen data on a public platform, the group aims to pressure the victim into paying a ransom to prevent the exposure of confidential information.

Details of the alleged breach

Regarding the specific contents of the alleged breach, the current information is limited. The listing on the LockBit leak site does not provide details concerning the nature of the leaked or compromised data. Furthermore, there is no information provided regarding the total size of the data or the specific count of files involved in the incident.

The listing names no specific data types or categories of information that have been compromised. The available visual evidence, such as screenshots provided by the threat actor, only displays a general landing page of the leak site rather than specific evidence of stolen files.

About Probat

Probat is a prominent German company that specializes in the production of coffee processing and roasting machinery and systems. The organization is recognized as one of the global market leaders in the field of industrial coffee processing technologies, serving a wide range of industrial needs within the sector.

Potential impact and industry implications

This claim poses a potential risk to the operational continuity of the organization. Because Probat is a Germany-based company, any confirmed data breach could trigger significant legal consequences and sanctions under the European Union's General Data Protection Regulation (GDPR).

Based on the historical activities of the LockBit group, the potential exposure of sensitive information could lead to several secondary threats. If employee or customer data were compromised, it could result in identity theft or the launch of targeted phishing attacks against the organization's stakeholders. Additionally, for a company operating within the manufacturing sector, the leakage of trade secrets or proprietary supply chain information could cause lasting negative impacts on corporate reputation.

For organizations in the manufacturing sector, maintaining robust cybersecurity defenses is critical to protecting intellectual property and ensuring supply chain integrity. Common defensive strategies include implementing strict access controls, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized access. As ransomware groups continue to target industrial leaders, the protection of trade secrets remains a primary concern for corporate stability and reputation management.