Skip to content
Ransomware

tecnicarobertorocca.edu.ar listed on Lockbit5 leak site

The Argentina-based educational institution tecnicarobertorocca.edu.ar has been listed on the leak site of the LockBit ransomware group.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Lockbit5
  • Country: Argentina
  • Sector: Education
  • Announcement date: December 26, 2025

Lockbit5 claims data breach at tecnicarobertorocca.edu.ar

The Lockbit5 ransomware group has officially listed the Argentine educational institution tecnicarobertorocca.edu.ar on its dedicated leak site. This announcement, made on December 26, 2025, constitutes a claim of a data breach against the organization. While the group has posted the institution's name, the specific details regarding the nature of the alleged breach remain limited to the group's public listing.

Ransomware groups often utilize leak sites to pressure victims through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's internal systems to disrupt operations; they also steal sensitive data. The threat of publishing this stolen information on a public platform is used as leverage to coerce the victim into paying a ransom. If the ransom is not met, the group typically proceeds to release the data in stages to maximize public pressure and reputational damage.

Details of the alleged attack

According to the information provided by the Lockbit5 group, the alleged attack occurred on May 8, 2025. The group's listing includes a brief description of the institution's educational activities, providing context for the entity they are targeting. The group has imposed a deadline of January 14, 2026, for the victim to comply with their demands. The group has indicated that if the ransom demands are not met by this specified date, they may proceed to publish the data on their leak site.

Regarding the specific content of the breach, there is no information regarding the nature of the alleged leaked data in the provided records or the group's announcement. The listing does not specify the types of files, the volume of data, or the specific categories of information that have been targeted during the alleged intrusion.

  • No specific data types were named in the listing.

About Escuela Técnica Roberto Rocca

Escuela Técnica Roberto Rocca is an educational institution located in Campana, Argentina. The institution is focused on providing high-quality technical education. Its primary mission is to develop industrial competencies, working in collaboration with the Tenaris and Techint Group.

Potential risks and organizational impact

The implications of such a breach depend heavily on the nature of the data involved. Given that the institution operates in the education sector, it is highly likely that the leaked data may contain personal information of students and staff. Such a scenario could lead to significant legal obligations under Argentina's personal data protection regulations. The potential publication of such data may increase secondary risks for individuals within the institution, including the possibility of identity theft and targeted phishing attacks.

Furthermore, considering the past activities of the Lockbit group, it is assessed that the institution's operational continuity could also be affected by such an incident. When an organization is targeted by ransomware, the primary goal is often to disrupt business or educational processes through encryption or the threat of data exposure.

For organizations operating in the education sector, maintaining robust data security measures is a critical component of operational resilience. This includes implementing strict access controls, regular security audits, and comprehensive employee training to prevent phishing. It is also vital for institutions to have a clear incident response plan and to notify the relevant authorities immediately when a breach is suspected or confirmed. Taking proactive steps to secure sensitive student and staff information is essential to mitigating the long-term risks associated with data exfiltration and identity theft.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

Related stories