VULNpocalypse
LowBreach / campaignMonitoring

LockBit5 ransomware group claims starmark.co.th on its leak site

RansomLook reports LockBit5 listed starmark.co.th on its leak site; the claim is unconfirmed, so partners should watch for official notices.

Published
Exploitation
Not confirmed, the only evidence is a leak-site listing reported by RansomLook

What happened

According to a RansomLook entry dated 2026-11-08, the lockbit5 ransomware group claims starmark.co.th on its leak site. RansomLook tracks leak-site posts. It does not verify them.

Only the headline could be reviewed. The full entry could not be read, so this advisory includes no detail beyond the headline.

The following are not confirmed:

  • whether any intrusion took place
  • whether any data was taken or encrypted
  • how anyone got in
  • how much data is involved

starmark.co.th has not confirmed the claim in any available source. No independent outlet has reported on it.

Am I affected?

This is not confirmed. The sources do not name any affected systems, data types, customers or partners.

What to do now

  1. If you have a business relationship with starmark.co.th, look for an official notice from the organisation and follow any guidance it gives.
  2. Treat any unexpected messages that appear to come from starmark.co.th with normal caution, and check them through a known contact.
  3. Come back to this advisory. It will be updated if the organisation or an independent source confirms or denies the claim.

Sources