LockBit5 Claims Ransomware Incident Against Merlo

· Original article ↗

Summary

LockBit5 claimed a ransomware incident against Merlo, listing merlo[.]de on its leak site and threatening data exfiltration and ransom demands. The claim is unverified; no incident impact is independently confirmed.

Key points

  • The monitoring record names Merlo (merlo[.]de) as the victim and LockBit5 as the actor.
  • The claim is attributed to a LockBit5 leak-site post and monitored by ransomware[.]live.
  • The post threatens data exfiltration and ransom demands; these remain claims, not independently confirmed incident details.
  • The article provides no confirmation from Merlo or evidence of compromise, data theft, or operational impact.

Article Details

Victim
merlo.de
Victim Domain
merlo.de
Claim Date
2026-04-24
Exfiltration Status
Exfiltration was threatened; actual exfiltration is unconfirmed.
Ransom Demand
Ransom demands were mentioned, but no amount was disclosed; the claim is unconfirmed.

Threat Actors

Vendors

Products

Countries