[LOCKBIT5] – Ransomware Victim: httoy[.]fi

Verification alert Listings attributed to LOCKBIT5 have been reported as including unverified or fabricated victim claims. Treat this post as unconfirmed until corroborated with independent evidence. See further information here: BankInfoSecurity

See further information here: BankInfoSecurity

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an editorial notice informing that a company has fallen victim to a ransomware attack. RedPacket Security is not affiliated with any ransomware threat actors or groups and will not host infringing content. The information on this page is automated and redacted whilst being scraped directly from the LOCKBIT5 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On September 14, 2026, the ransomware group LockBit 5.0 published a post listing httoy.fi as an alleged victim. The available description identifies httoy.fi as an accounting and financial administration provider operating in Rauma, Finland. No compromise date is provided, so September 14, 2026, is treated as the post date rather than the date of intrusion. The listing does not specify whether systems were encrypted, whether data was exfiltrated, or what operational impact the organization experienced. The post does not state a ransom demand or provide a claimed ransom amount. It also does not report an amount of stolen data, identify specific affected information, or indicate that files are available for download. No screenshots or other images are included with the listing, and no additional supporting material is described. Based on the available content, the post represents an unsubstantiated ransomware-related claim concerning httoy.fi, with insufficient information to determine the scope or outcome of the alleged incident.

On September 14, 2026, the ransomware group LockBit 5.0 published a post listing httoy.fi as an alleged victim. The available description identifies httoy.fi as an accounting and financial administration provider operating in Rauma, Finland. No compromise date is provided, so September 14, 2026, is treated as the post date rather than the date of intrusion. The listing does not specify whether systems were encrypted, whether data was exfiltrated, or what operational impact the organization experienced.

The post does not state a ransom demand or provide a claimed ransom amount. It also does not report an amount of stolen data, identify specific affected information, or indicate that files are available for download. No screenshots or other images are included with the listing, and no additional supporting material is described. Based on the available content, the post represents an unsubstantiated ransomware-related claim concerning httoy.fi, with insufficient information to determine the scope or outcome of the alleged incident.

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.