LockBit5 Claims Ransomware Incident Against Merlo

Summary
LockBit5 claimed a ransomware incident against Merlo, listing merlo[.]de on its leak site and threatening data exfiltration and ransom demands. The claim is unverified; no incident impact is independently confirmed.
Key points
- The monitoring record names Merlo (merlo[.]de) as the victim and LockBit5 as the actor.
- The claim is attributed to a LockBit5 leak-site post and monitored by ransomware[.]live.
- The post threatens data exfiltration and ransom demands; these remain claims, not independently confirmed incident details.
- The article provides no confirmation from Merlo or evidence of compromise, data theft, or operational impact.
Article Details
- Victim
- merlo.de
- Victim Domain
- merlo.de
- Claim Date
- 2026-04-24
- Exfiltration Status
- Exfiltration was threatened; actual exfiltration is unconfirmed.
- Ransom Demand
- Ransom demands were mentioned, but no amount was disclosed; the claim is unconfirmed.
