Lockbit5 ransomware group lists toncandigital.com on its leak site

• Ransomware group: Lockbit5
• Country: United States
• Sector: Technology
• Announcement date: March 30, 2026

LockBit5 claims data breach against Toncan Digital

The LockBit5 ransomware group has officially listed toncandigital.com on its dedicated leak site, alleging that the organization has been the victim of a data breach. This announcement, posted on March 30, 2026, follows a period of alleged unauthorized access that the group claims occurred on February 24, 2026. While the group has made these claims publicly, the breach remains an allegation made by the threat actor.

The group behind this activity, LockBit5, is a known entity in the ransomware landscape. Historical data indicates that the group has been active since 2019. Following significant infrastructure disruptions that occurred in February 2024, the group reportedly returned to operations with a new version of its software. This resurgence highlights the persistent nature of such threat actors and their ability to adapt their methodologies following law enforcement or technical interventions.

Details of the alleged exfiltration

According to the post published by the threat actor, data belonging to the organization has been exfiltrated from their systems. To support their claim of a successful breach, the group provided nine distinct download links within their announcement. These links are intended to provide access to the allegedly stolen information.

Despite the provision of these links, the group has not provided specific details regarding the content of the leaked data. The listing does not specify the types of files, the volume of the data, or the exact nature of the information contained within the nine separate links shown in the group's screenshot. Consequently, the specific contents of the alleged breach remain unconfirmed.

About Toncan Digital

Toncan Digital is a technology company based in the United States. The organization specializes in providing printing solutions and digital equipment designed for office environments. Their primary focus involves delivering reliable and fast printing systems that support the daily operations and tasks of various office settings.

Potential impacts and industry risks

The alleged breach of Toncan Digital carries several potential implications for the organization. This type of incident may create negative impacts on the company's operational continuity and could potentially damage customer trust. Because the organization is based in the United States, the presence of any personal data within the breach could trigger state-level privacy laws and lead to potential legal sanctions.

The methodology employed by the LockBit group is often characterized as double extortion. In such scenarios, threat actors not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. The publication of stolen data can lead to secondary risks, including identity theft and the execution of targeted phishing attacks against the organization or its clients.

Furthermore, because Toncan Digital operates within the technology sector, this incident suggests potential risks regarding supply chain security. Organizations in this sector often serve as critical nodes in the digital infrastructure of their clients, meaning a breach can have ripple effects. To mitigate such risks, organizations typically focus on robust defensive measures, such as implementing strict access controls, maintaining comprehensive logging, and ensuring regular security updates to protect against evolving threats.