cyber.hendryadrian.com
Ransom Monitor · ransomware.live

LockBit5 Claims Ransomware Attack on Ravagnan Group

· Original article ↗

Summary

A ransomware.live record attributes a ransomware claim against Ravagnan Group (ravagnan[.]com) to LockBit5 and links to the actor’s post. The claimed disruption is unconfirmed.

Key points

  • The record names Ravagnan Group in Italy as the alleged victim and LockBit5 as the actor.
  • It links the claim to a post on the actor’s onion site and says the record was monitored by ransomware.live.
  • The post says the group employs about 250 people in Italy and additional staff in Latin America.
  • The article states the claim is based on public statements by the ransomware group and that its accuracy cannot be confirmed.

Article Details

Victim
RAVAGNAN GROUP
Victim Domain
ravagnan.com
Claim Date
2026-07-03
Encryption Status
Ransomware deployment is reported in the article but is based on an unverified group claim.
Leak Status
A lockbit5 claim post is listed as published on 2026-07-03; the claim is unverified, and publication of victim data is not confirmed.

Threat Actors

lockbit5Identified as the ransomware actor attributed with the incident; the article says its public claims cannot be confirmed.

Countries

ItalyRavagnan.com, an IT-based organization employing about 250 people in Italy with additional staff across Latin America, was impacted by ransomware activities attributed to the lockbit5 threat actor.