casaandina.com.co Listed by lockbit5 Ransomware Group

On June 13, 2026, the ransomware group LockBit5 added casaandina.com.co to its public leak site, claiming that internal files had been exfiltrated from the Colombian hardware and construction materials distributor.

What's Publicly Reported from Reporting

Public reporting indicates the company, which describes itself as the premier hardware and construction material distributor serving the southwestern region of Colombia, suffered a ransomware intrusion. The attackers claim to have stolen internal documents and posted proof on the LockBit5 leak portal. No exact number of affected individuals has been disclosed, and the precise volume or sensitivity of the files remains unclear from available reporting. The listing appeared on the group’s onion site, which is routinely monitored by researchers tracking ransomware activity.

Why This Matters for You and Your Family

When a regional supplier like Casa Andina is breached, the exposed internal files can contain names, addresses, phone numbers, email accounts, and payment details of customers, vendors, and employees. If your family has ever bought building materials, scheduled a delivery, or worked with a contractor in southwestern Colombia, your information could be among the records now in attackers’ hands. Credential leaks from such incidents frequently cascade into account takeovers on personal email, banking, and shopping sites you reuse passwords for. Children’s accounts tied to family emails are especially vulnerable because gaming platforms and parental controls often share the same contact details.

The Doxxing and Identity-Chain Risk

Stolen internal files rarely stay isolated. Attackers map relationships between work emails, personal addresses, phone numbers, and online handles. Once one account is compromised, it becomes the entry point for doxxing chains that expose family members, home addresses, and children’s gaming profiles. Public reporting describes how these linked records are packaged and sold on underground forums, increasing the chance of identity theft, targeted phishing, or physical harassment. A single supplier breach can therefore ripple outward, turning routine purchase data into a roadmap for long-term targeting of you and your family.

LockBit5’s Publicly Known Track Record

Public reporting attributes the current attack to LockBit5, the latest iteration of the LockBit ransomware operation. The group first emerged in 2019 and has repeatedly rebranded after law-enforcement actions. It has claimed responsibility for attacks on hospitals, manufacturers, financial firms, and retailers worldwide. The typical playbook involves initial access through phishing or exploited remote desktop services, followed by rapid exfiltration of internal files before encryption. LockBit5 then demands payment and, if unpaid, publishes samples on its leak site with countdown timers to pressure victims. Researchers note the group’s focus on volume and its willingness to target organizations of any size that possess marketable data.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then complete the no-subscription cleanup of exposed records.
• Rotate the password used at casaandina.com.co anywhere it is reused and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that chain back to the same address or email.
• Let remediation specialists handle takedown requests across data brokers and suspicious sites on your behalf.

The incident shows that even regional suppliers can become gateways to personal exposure, making early detection and cleanup essential. Start your DoxxScan trial today and pair it with hands-on remediation by specialists who provide continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, and household coverage that includes your children’s gaming accounts. Taking these steps now limits how far attackers can travel along any identity chain created by the Casa Andina breach.