Lockbit5 ransomware group lists sidercentersas.com on its leak site

• Ransomware group: Lockbit5
• Country: Colombia
• Sector: Manufacturing
• Announcement date: March 30, 2026

LockBit5 claims data breach against Sider Centers S.a.s.

The LockBit5 ransomware group has listed Sider Centers S.a.s. on their dedicated leak site, alleging that the organization has suffered a data breach. This announcement, which was officially posted on the group's platform on March 30, 2026, follows a previous update made by the threat actors on March 17, 2026. Such listings are a common tactic used by ransomware groups to pressure victims into paying ransoms by threatening to release sensitive information to the public.

The claim suggests that a breach attempt against the company's network may have occurred, potentially compromising internal systems. While the group has made this public claim, they have not provided specific details regarding the nature of the intrusion or the exact timeline of the initial access, though the claim is associated with an alleged attack date of February 3, 2026.

Details of the alleged leak

Despite the public listing on the LockBit5 leak site, the group has been notably vague regarding the specifics of the incident. The announcement includes general information about the operations of Sider Centers S.a.s., but it fails to provide concrete details regarding the scope of the compromise. Specifically, the group has not disclosed a ransom demand, nor have they provided information regarding the total size of the leaked data or the specific file count involved in the breach.

Furthermore, the listing does not include any sample files or specific details regarding the content of the data that is allegedly being held by the attackers. The listing names no specific data types that have been compromised.

About Sider Centers S.a.s.

Sider Centers S.a.s. is a manufacturing company that operates within the industrial zone of Marcianise, Italy. The organization specializes in metal processing and various industrial production processes. While the company's operational profile is established, the potential impact of this alleged breach remains to be fully assessed due to the lack of information provided by the ransomware group.

Analysis and potential risks

The announcement by LockBit5 suggests that the company's sensitive data may have been compromised. If the organization holds employee or customer data, this situation could pose a significant risk for identity theft or the execution of targeted phishing attacks against the company's stakeholders. Because the company is based in Colombia, any potential data breach may trigger legal proceedings under local data protection regulations.

LockBit5 is a group known for its continuous activity since 2019. The group has maintained its operations by consistently updating its infrastructure, which suggests that the company may be subjected to secondary extortion methods. In such scenarios, attackers often move beyond initial encryption to exploit the stolen data for further leverage.

For organizations operating in the manufacturing sector, such incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent network monitoring to detect unauthorized access early. Protecting industrial production processes and intellectual property is vital for maintaining operational continuity and regulatory compliance.