murni.co.id listed on Lockbit5 ransomware leak site

• Ransomware group: Lockbit5
• Country: Indonesia
• Sector: Agriculture and Food Production
• Announcement date: April 26, 2026

Lockbit5 claims a data breach against murni.co.id

The Lockbit5 ransomware group has officially listed the organization murni.co.id on its dedicated leak site. According to the announcement made on April 26, 2026, the threat actor group claims to have successfully gained unauthorized access to the systems belonging to the Indonesian organization. This announcement follows a claimed intrusion date of April 17, 2026.

The group asserts that they have performed a data breach as part of their operations. Ransomware leak sites serve as a platform for cybercriminals to exert pressure on victims by threatening to release sensitive information if specific demands are not met. This tactic is a hallmark of modern ransomware operations, designed to maximize the impact of an attack through public exposure.

Details regarding the claimed event

The announcement provided by the Lockbit5 group focuses on the fact that the organization provides ICT-based solutions. While the group has claimed to have breached the organization's systems, the specific details regarding the nature of the incident remain limited. The group has not provided information regarding the volume of data taken or the specific file count involved in the operation.

Regarding the specific types of information that may have been compromised, the listing names no data types. The available evidence provided by the group consists only of a screenshot that displays a landing page, which does not reveal the contents of the alleged breach.

Organization profile

PT Murni Solusindo Nusantara, operating under the domain murni.co.id, is an IT solutions provider based in Indonesia. The company specializes in providing a variety of services, including hardware, software, and digital transformation solutions. Their professional focus is particularly centered on serving the banking and retail sectors, providing essential ICT-based services to these industries.

Impact assessment and industry implications

The leakage of an organization's data can lead to significant operational disruptions and substantial reputational damage. For a provider of digital transformation and IT services, such an event carries high stakes. Furthermore, the organization may face legal responsibilities under the existing data protection regulations in Indonesia. The potential consequences of such a breach often extend beyond the initial incident.

Given the known tactics employed by the Lockbit group, there is a possibility that any leaked data could be utilized in secondary attacks or targeted phishing campaigns against the organization or its clients. This highlights the risk of double extortion, a method where attackers not only encrypt data but also threaten to release it publicly to increase their leverage. Lockbit is a known Ransomware-as-a-Service (RaaS) group that has been tracked since 2019. It is notable that the group has returned with a new version following the disruption of its infrastructure in February 2024.

In general, organizations facing such threats often focus on strengthening their defensive postures. This includes implementing robust backup strategies, maintaining strict access controls, and conducting regular security audits. For companies in the IT solutions and digital transformation sector, maintaining the integrity of client data is a critical component of service delivery and regulatory compliance. The threat of secondary exploitation through phishing remains a persistent concern for any entity that suffers a data breach.