comta.com.tw Listed by lockbit5 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
comta.com.tw was listed by the LockBit5 ransomware group on June 20, 2026, after internal files were exfiltrated in a ransomware attack. An undisclosed number of people may be affected; verify whether your data appears on any published lists and change passwords or enable monitoring if it does.
Breaking down the breach
The only confirmed public record at this stage is the lockbit5 leak-site listing dated June 20, 2026. The entry asserts that files were taken from comta.com.tw systems. No information on the volume of data, the encryption status of systems, or any ransom demand has been made public. Timing of the intrusion itself and the method of initial access remain undisclosed.
The group behind it: lockbit5
Lockbit5 is a ransomware operation that has conducted multiple campaigns since 2019. It typically gains access through phishing, compromised remote-desktop services, or software vulnerabilities, then deploys encryption while copying selected files. The group maintains a leak site where it lists organizations it claims to have targeted. In this case the site lists comta.com.tw; that listing constitutes the group’s claim and has not been independently verified by the organization or by investigators.
Who is comta.com.tw?
Comta, also styled Como, was established in 1990 and began as a specialist in mold design and manufacturing. Over time the company expanded its operations in precision tooling and related industrial services. Organizations in this sector routinely maintain records on clients, suppliers, production specifications, and internal engineering data.
The information in question
The lockbit5 listing refers only to “internal files.” No inventory of specific data categories has been released. Companies of this type commonly store customer contact details, order histories, technical drawings, supplier contracts, and employee records, yet the exact contents taken in this incident are unconfirmed.
Why it matters
Exfiltration of internal files can expose proprietary designs and business relationships even when personal data volumes are unknown. For individuals whose information appears in those files, the main risks are targeted phishing or misuse of contact details. For the company, the incident may affect client trust and require forensic review of systems whose status is not yet public.
If your data was in this claimed breach
Because the exact records involved have not been published, individuals cannot yet determine exposure from official statements alone. Practical steps include the following:
- Review bank and credit-card statements for unusual activity.
- Enable multi-factor authentication on accounts that use the same email or password combinations.
- Request a free exposure scan of your email address against known breach data sets to check for prior appearances of your information.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
amc.co.th Listed by lockbit5 Ransomware Groupsra.nl Listed by lockbit5 Ransomware Groupinspeqingenieria.com Listed by lockbit5 Ransomware Groupsaico.co.th Listed by lockbit5 Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the comta.com.tw Listed by lockbit5 Ransomware Group →
Publicly posted by lockbit5 — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.