Uniplaclages.edu.br listed on Lockbit5 ransomware leak site

• Ransomware group: Lockbit5
• Country: Brazil
• Sector: Education
• Announcement date: December 22, 2025

Lockbit5 claims data breach at uniplaclages.edu.br

The Lockbit5 ransomware group has issued a public announcement on its leak site, claiming to have published data belonging to uniplaclages.edu.br. This listing, which appeared on the group's platform on December 20, 2025, suggests that the digital assets of the institution may be at risk following a purported attack that occurred around December 15, 2025.

Ransomware leak sites are a common tool used by cybercriminal groups to exert pressure on victims. In many modern ransomware campaigns, threat actors employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information before the encryption process begins. By threatening to release this stolen data on a public leak site, the attackers aim to coerce the victim into paying a ransom to prevent the exposure of confidential information, which could lead to significant regulatory penalties and reputational damage.

Details of the alleged leak

While the specific content of the alleged leaked data has not been detailed by the threat actor, the nature of the institution suggests the potential for significant exposure. Based on the type of services provided by the organization, it is assessed that the compromised information may include access to student and employee portals, distance learning systems, and library access records.

The listing identifies the following types of affected data:

• Student data
• Employee data
• Educational portal access credentials

It is important to note that the exact volume of the data and the specific files involved remain unknown, as no specific file count or data size has been provided in the announcement.

About UNIPLAC (Centro Universitário Facvest)

UNIPLAC, also known as Centro Universitário Facvest, is a higher education institution situated in the state of Santa Catarina, Brazil. The institution provides a variety of academic services, including various undergraduate and postgraduate programs. Additionally, UNIPLAC offers distance learning services to its student body.

Potential impact and organizational risks

The situation involving uniplaclages.edu.br presents several significant risks. The exposure of sensitive information could compromise the privacy of both students and staff members, potentially leading to secondary risks such as identity theft. Furthermore, under Brazil's General Data Protection Law (LGPD), the institution may face mandatory data breach notification requirements due to the nature of the potential exposure.

Given the established history and past activities of the LockBit group, such leaks can serve as a foundation for targeted phishing attacks. In these scenarios, attackers use the stolen information to craft highly convincing fraudulent communications to further exploit the victims or the institution itself. Additionally, any disruptions caused by such an attack can negatively impact the continuity of educational services and result in lasting reputational damage to the institution.

For organizations operating within the education sector, maintaining robust cybersecurity postures is essential to mitigate these risks. Common defensive steps include implementing multi-factor authentication (MFA) across all portals, conducting regular security awareness training for students and staff to prevent phishing, and maintaining rigorous backup protocols to ensure service continuity. Furthermore, ensuring compliance with regional data protection regulations, such as the LGPD, helps organizations establish formal procedures for responding to and notifying parties in the event of a breach.