Lockbit5 ransomware group lists samkee.com on its leak site

• Ransomware group: Lockbit5
• Country: South Korea
• Sector: Manufacturing
• Announcement date: December 29, 2025

Lockbit5 claims data breach against Samkee

The manufacturing company samkee.com has been listed on the leak site of the Lockbit ransomware group. The group has made a public claim regarding a data breach involving the organization, marking a significant cybersecurity incident for the entity.

According to the announcement made on the group's leak site, the Lockbit group listed samkee.com on December 29, 2025. The group alleges that it has successfully compromised the company's data. In their communication, the threat actors have set a deadline of January 19, 2026, for the organization to respond to their demands.

Lockbit is a well-known ransomware group that has been active since 2019. The group is notable for its persistence in the cyber threat landscape; following infrastructure disruptions experienced in February 2024, the group reportedly resumed its operations using a new version of its malware. This resurgence highlights the ongoing threat posed by sophisticated ransomware-as-a-service operations that adapt to defensive measures.

Details of the alleged data leak

While the threat actor has confirmed the listing of the company on their platform, specific details regarding the nature of the allegedly leaked data have not been provided. The group has not disclosed the volume of files or the specific types of information that were targeted during the operation.

• No specific data types have been identified in the listing.

In many modern ransomware attacks, threat actors employ a tactic known as double extortion. This method involves not only encrypting the victim's systems to disrupt operations but also stealing sensitive data to use as leverage. By threatening to publish or sell stolen information on public leak sites, attackers increase the pressure on the victim to pay the ransom. The lack of specific information regarding the data at this stage is common in the early stages of a leak site announcement.

About Samkee

Samkee is a South Korean manufacturing company with a long-standing presence in the industrial sector. Founded in 1978, the company specializes in the production of aluminum die-casting parts and precision components. Their manufacturing expertise is focused on the automotive industry, where they serve as a supplier of engine and transmission parts to various global automobile manufacturers.

Potential impact and organizational risks

This incident may create a negative impact on the company's operational continuity and could lead to a loss of commercial reputation. Because the company is based in South Korea, the breach may trigger specific legal obligations and administrative sanctions under the Personal Information Protection Act (PIPA).

Beyond the immediate disruption, a data leak can lead to secondary risks. These include the potential for identity theft or targeted phishing attacks directed at the company's employees and business partners. When sensitive corporate or personal information is compromised, the attack surface for subsequent social engineering attempts increases significantly.

For organizations operating within the manufacturing and automotive supply chain, maintaining robust cybersecurity posture is essential. Given the possibility of sensitive data being published or sold, companies often focus on defensive strategies such as implementing strict access controls, maintaining offline backups, and conducting regular security audits. Protecting the integrity of the supply chain is a critical priority for global manufacturers to prevent cascading effects across their network of partners.