hennessyfunds.com Listed by lockbit5 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On March 30, 2025, hennessyfunds.com was listed by the ransomware group known as lockbit5, which claims to have carried out an attack involving the exfiltration of internal files. Public detail remains limited: the number of people affected is unknown, and no further confirmation of the incident’s scope or method has been disclosed beyond the group’s listing itself.

For an investment firm that manages client assets and strategies, any unauthorized access to internal material raises practical concerns about confidentiality and operational continuity. What is known so far is confined to the reported listing and the stated claim of file exfiltration; everything else is unconfirmed.

Inside the incident

According to available reporting, hennessyfunds.com appeared on a lockbit5 leak site on March 30, 2025. The group claims that internal files were exfiltrated as part of a ransomware attack. No public information has been released about the precise timing of any intrusion, the technical method used, the volume of data involved, or whether systems were encrypted. The number of individuals potentially affected is listed as unknown. Beyond the group’s assertion that internal files were taken, no independent verification of the claim or additional technical details has been made public.

Who is lockbit5?

Lockbit5 is associated with the LockBit ransomware operation, a well-documented ransomware-as-a-service group that has been active for several years. Groups of this type typically gain access to networks, exfiltrate data, and then demand payment under threat of publishing the stolen material—a tactic often called double extortion. LockBit affiliates have previously targeted organizations across multiple sectors, posting victim names on dedicated leak sites when negotiations stall. In this case, the listing of hennessyfunds.com constitutes a claim by the group; it has not been independently confirmed in the available facts. No specific statements attributed to lockbit5 about this particular victim, beyond the listing itself and the assertion of internal-file exfiltration, are part of the public record provided here.

hennessyfunds.com and its sector

Hennessy Funds, operating via hennessyfunds.com, is described as offering high-conviction investment strategies intended to serve a range of investors. Firms in the asset-management and mutual-fund sector routinely handle sensitive material: client account details, portfolio holdings, trading records, internal research, employee information, and regulatory filings. Because these organizations sit at the intersection of personal financial data and market-sensitive information, a breach can affect both individual clients and the firm’s ability to operate with confidence. The listing therefore carries weight for anyone who has entrusted assets or personal details to the firm, even while the exact scale of this incident remains undisclosed.

What data was at risk

The only data type named in the available facts is “internal files” said to have been exfiltrated in a ransomware attack. No further breakdown—such as whether client records, financial statements, employee data, or proprietary research were included—has been disclosed. Organizations of this kind typically maintain databases of investor contact information, account numbers, transaction histories, tax identifiers, and internal strategy documents. Because the precise contents of the claimed exfiltration are unconfirmed, it is not possible to state which of those categories, if any, were actually exposed. Public detail on the data at risk is limited to the group’s assertion that internal files were taken.

What's at stake

For individuals, the primary risks center on the possible misuse of any personal or financial information that may have been among the internal files. That could include attempts at identity fraud, targeted phishing that references real account details, or unauthorized access to investment accounts if credentials or identifiers were present. For the firm itself, the stakes include potential regulatory scrutiny, loss of client trust, and the operational cost of investigating and containing the incident. Because the number of people affected is unknown and the exact data types remain unconfirmed, the concrete impact cannot yet be quantified; the risk is real but currently unmeasured.

Were you affected?

If you are a client, employee, or partner of Hennessy Funds, monitor account statements and credit reports for unusual activity and consider placing fraud alerts with major credit bureaus. Change passwords associated with any related online accounts and enable multi-factor authentication where available. Because public confirmation of specific victims is lacking, the most practical next step is to check whether your email address has already appeared in known breach data sets. Free exposure-scan tools can perform that check quickly and without cost, giving you an early indication of whether your information has surfaced elsewhere.

AICompiled with AI assistance from public sources and published under our editorial standards.