manuaco.pt Listed by lockbit5 Ransomware Group

On December 25, 2025, the Portuguese company Manuaço appeared on the LockBit 5 ransomware leak site with internal files listed for public download after the firm failed to meet the attackers’ demands.

What's Publicly Reported from Reporting

Public reporting indicates that Manuaço, a Portuguese business operating since 2006, had sensitive internal documents exfiltrated during a ransomware incident. The data was published on the LockBit 5 dark-web portal on Christmas Day 2025. Victim count remains unknown, and the precise volume or specific categories of records exposed have not been independently verified beyond the attackers’ claims of successful exfiltration. The leak site post includes a sample of the stolen files, consistent with the group’s standard publication method when ransom is not paid.

Why This Matters for You and Your Family

When a company that holds personal information about customers, suppliers, or partners is breached, your data can end up in the hands of criminals even if you never directly interacted with the victim organization. Internal files often contain spreadsheets with names, addresses, phone numbers, email accounts, contract details, or payment records. Once published on a ransomware leak site, that information becomes freely available to identity thieves, stalkers, and fraudsters. For ordinary families this can translate into unexpected spam, phishing campaigns, loan applications taken out in your name, or worse.

The Doxxing and Identity-Chain Implications

Credential leaks and exposed contact details rarely stay isolated. A single email or phone number taken from a company file can be correlated with your social-media handles, children’s gaming usernames, or school records. Attackers chain these fragments together to build a complete profile that enables doxxing, account takeovers, and targeted harassment. Gaming accounts belonging to you or your children are especially vulnerable because the same password or recovery email reused from a breached company file can hand over control of those platforms within minutes.

LockBit 5’s Publicly Known Track Record

Public reporting attributes the current attack to LockBit 5, the latest iteration of one of the longest-running ransomware-as-a-service operations. The group first emerged in 2019 under the original LockBit name and has rebranded multiple times after law-enforcement actions. It has claimed thousands of victims across sectors including healthcare, education, manufacturing, and local government. The typical playbook involves initial access through phishing, remote desktop protocol brute-force, or stolen credentials; rapid encryption of networks; exfiltration of sensitive files; and a double-extortion model that combines ransom demands with the public threat to publish stolen data on their leak site if payment is not received by a short deadline.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what a leak like this exposes.
• Rotate any password you used at Manuaço or similar service providers and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts which often chain back to the same addresses and recovery details.
• Let remediation specialists handle takedown requests and broker removals for you while you focus on securing your own accounts.

The incident is a reminder that ransomware groups continue to target ordinary businesses that hold everyday personal information. Taking concrete steps now limits how far a single breach can reach. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects online handles to real identities, hands-on remediation by specialists, and full household coverage that extends to children’s gaming accounts. Start your DoxxScan trial today to close the gaps this Christmas Day leak has opened.