LockBit5 Claims Ransomware Attack on Instapack.es
Summary
LockBit5 claims it encrypted Instapack[.]es systems and exfiltrated sensitive data, demanding ransom and threatening publication or auction. The monitoring post says the claims are unconfirmed.
Key points
- The monitoring record names Instapack.es, a Spanish courier service, as the claimed victim.
- The claim is attributed to LockBit5 and linked to the group’s leak-site post.
- LockBit5 allegedly claims encryption and data exfiltration, and threatens to publish or auction the data unless its ransom demand is met.
- The post is based on public ransomware-group claims; the incident details are unconfirmed.
Article Details
- Victim
- Instapack.es
- Victim Domain
- instapack.es
- Claim Date
- 2026-04-28
- Encryption Status
- LockBit5 claimed that it encrypted the victim's systems; the source says the claim is unconfirmed.
- Exfiltration Status
- LockBit5 claimed data exfiltration; the source says the claim is unconfirmed.
- Exfiltrated Data
- Sensitive data, according to the claim; specific data types were not disclosed.
- Ransom Demand
- The group allegedly demanded a ransom for decryption keys; no amount was reported.
- Leak Status
- The group allegedly threatened to leak or auction the data if its demand was not met; no publication was reported.