grupoconstrutodo.com Listed by lockbit5 Ransomware Group

On December 25, 2025, the ransomware group LockBit5 added grupoconstrutodo.com to its leak site, claiming that internal files had been exfiltrated from the Chilean construction-materials company Comercializadora Construtodo.

Reported Details from Reporting

Public reporting indicates the company, which has operated for more than 15 years under the slogan “Más que materiales, somos soluciones,” suffered a ransomware intrusion. The attackers posted a notice on the LockBit5 leak site hosted on the dark web, stating that data had been stolen. Available reporting describes the exposed material as internal files; the exact volume and complete list of records remain unconfirmed. No specific customer or employee count has been released, leaving the full scope of personal data at risk unclear.

Why This Matters for You and Your Family

When a company that supplies building materials to homes and businesses is breached, the information it holds often includes names, addresses, phone numbers, email accounts, and payment details of ordinary customers and suppliers. If your family has ever bought construction supplies, requested a quote, or paid an invoice to Construtodo, some of your contact information may now sit on a ransomware leak site. Once posted publicly, that data rarely disappears quickly. It can be downloaded, reposted, and combined with other leaks within hours.

The Doxxing and Identity-Chain Risk

Stolen internal files frequently contain spreadsheets that link customer identities to addresses, phone numbers, and sometimes tax IDs. Attackers and opportunistic criminals then chain this information with usernames, passwords, or gaming handles found in other breaches. A single address or phone number can tie your work email to a child’s Roblox or Minecraft account, turning one leak into a complete profile that enables harassment, account takeovers, or physical intimidation. Credential leaks like this one regularly cascade into gaming-account compromises because children often reuse simplified passwords across family devices and online services.

LockBit5’s Publicly Known Track Record

Public reporting attributes LockBit5 as the latest iteration of the LockBit ransomware operation. The group first gained notoriety several years ago and has targeted hospitals, schools, manufacturers, and small businesses worldwide. Its typical playbook involves gaining initial access through phishing or exploited remote-desktop services, exfiltrating data before encryption, then publishing samples on its leak site with a countdown to full disclosure unless ransom is paid. The group routinely posts victim data on onion sites and encourages mirror sites to keep the pressure on targets.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours rather than months.
• Rotate any password you have used at grupoconstrutodo.com or related supplier portals anywhere it is reused, and switch on 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that can chain back to the same address or phone number.
• Let remediation specialists handle takedown requests across data brokers and leak repositories while you focus on securing accounts at home.

The incident shows that construction suppliers and everyday service providers are now routine targets; protecting your family requires more than changing one password. Start your DoxxScan trial today for continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping that links scattered handles to real identities, and hands-on remediation by specialists who also secure gaming accounts for you or your children.