planetsport.ma Listed by lockbit5 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

A ransomware group known as lockbit5 listed the Moroccan online retailer planetsport.ma on its data-leak site on April 29, 2026. The listing states that internal files were exfiltrated in a ransomware attack, but no further details on the number of people affected, the volume of data, or the timeline of the incident have been made public. Such listings form part of a broader pattern in which ransomware operators publish claims of stolen data to pressure victims. The absence of confirmed figures leaves the full scope of the event unclear.

Breaking down the breach

The only confirmed information is the April 29, 2026 listing itself and the statement that internal files were taken. No count of records, no description of file types, and no confirmation of encryption or ransom demands have been released. The organisation has not issued a public statement on the matter, and independent verification of the data’s authenticity remains unavailable.

The group behind it: lockbit5

Lockbit5 is the name used by a ransomware-as-a-service operation that has been active for several years. The group typically supplies encryption tools to affiliates who conduct intrusions, then demands payment for both decryption keys and promises not to publish stolen data. It has previously claimed responsibility for attacks on organisations in multiple countries and sectors. In this case the group claims to have targeted planetsport.ma, but that claim has not been corroborated by the victim or by law-enforcement sources.

planetsport.ma and its sector

Planetsport.ma operates as an online store selling sports equipment and apparel to customers in Morocco. Retail platforms of this kind routinely collect customer names, delivery addresses, payment details, and order histories, as well as internal records such as supplier contracts and inventory data. A breach at any retailer handling such information can expose both personal customer records and business-sensitive material, regardless of the organisation’s size.

The information in question

The listing refers only to “internal files.” No inventory of specific data categories has been published. Organisations in online retail commonly store customer account information, transaction records, and employee or supplier details; however, whether any of these categories were among the exfiltrated files has not been confirmed.

The real-world impact

Individuals whose data may have been taken face the standard risks associated with exposed personal or financial information, including potential misuse for fraud or account takeover. The organisation itself may experience operational disruption if systems were encrypted and could face regulatory or reputational consequences once more details become available. At present, the absence of confirmed data volumes makes it impossible to quantify these effects.

Were you affected?

Customers of planetsport.ma should monitor their financial accounts and email inboxes for unusual activity. Changing passwords for any accounts linked to the retailer and enabling multi-factor authentication where available are prudent steps. Individuals can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.