Topackt.com listed on LockBit5 leak site

• Ransomware group: Lockbit5
• Country: United States
• Sector: Technology
• Announcement date: December 7, 2025

LockBit5 claims data breach at topackt.com

The LockBit5 ransomware group has listed the Germany-based IT service provider topackt.com on its dedicated leak site. According to the announcement made on December 7, 2025, the threat actors claim to have successfully executed an attack against the organization, which they allege occurred on January 23, 2025. This latest listing follows a pattern of activity from the group, which has been monitored as a Ransomware-as-a-Service (RaaS) operation since 2019 and has continued its operations following an infrastructure disruption in February 2024.

Ransomware leak sites are frequently used by cybercriminals to exert pressure on victims through a tactic known as double extortion. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information before the encryption occurs. The threat of leaking this stolen data on a public forum serves as a powerful tool to coerce the victim into paying a ransom. While the presence of a company on a leak site is a serious allegation, it is important to note that these claims are made by the threat actors themselves.

Details of the alleged attack

The announcement made by the LockBit5 group alleges a significant breach involving multiple entities. The threat actors claim that the attack has affected the company's DNSX product. Furthermore, the group asserts that the breach extends beyond the primary organization, claiming that over 70 connected schools have also been impacted by the incident. This expansion of the attack scope suggests a potential focus on supply chain vulnerabilities, where attackers target a service provider to gain access to a wider network of downstream clients.

The scale of the alleged theft is substantial. The group claims that the volume of compromised data exceeds 3TB. While the sheer volume of the data is highlighted, the announcement does not provide specific details regarding the nature or the specific types of the leaked data. The listing names no specific data types.

About topackt.com

Topackt IT Solutions GmbH is an IT service provider based in Germany. The company develops various technology solutions and software products, such as DNSX. Because the company provides essential services to various sectors, including educational institutions, it serves as a critical link in the digital infrastructure of its clients.

Implications and organizational risks

This incident highlights several critical risks associated with modern cyber threats. The claim that the breach affects multiple schools suggests that the LockBit5 group may be focusing on supply chain attacks. When a service provider is compromised, the downstream impact can be widespread, potentially exposing the sensitive information of students or staff members. The potential publication of such data could significantly increase the risk of identity theft or targeted phishing campaigns directed at the company's clients.

Given that the organization is based in Germany, this incident may trigger mandatory data breach notification requirements and various legal processes under the General Data Protection Regulation (GDPR). Organizations operating in the technology and IT services sector must remain vigilant against such threats. To mitigate risks, companies often implement robust defensive measures, such as multi-factor authentication, regular security audits, and strict access controls to limit the potential movement of an attacker within a network. Furthermore, maintaining comprehensive incident response plans and ensuring data encryption at rest and in transit are standard practices to reduce the impact of a potential breach.

Summary of claims

• Target: topackt.com
• Ransomware group: LockBit5
• Claimed attack date: January 23, 2025
• Claimed data volume: Over 3TB
• Affected products/entities: DNSX and over 70 connected schools