Ransomware Group: LOCKBIT3

VICTIM NAME: hennessyfunds[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the LOCKBIT3 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware group, identified as LockBit3, claimed responsibility for an attack on the website of Hennessy Funds, a financial services entity based in the United States. The attack was discovered on May 9, 2025, and involved the potential compromise of sensitive data associated with the organization. The leak page includes a screenshot indicating some level of data exposure, and a claim URL is provided where further details may be accessed, although the specifics of the information leaked are not publicly disclosed in this summary.

The targeted website appears to serve U.S. residents, primarily offering financial investment information, with explicit restrictions on non-U.S. persons. The attack’s impact might involve the exposure of internal documents, customer or employee data, or other confidential information, although detailed contents have not been publicly released. The leak site is hosted on the dark web, which is typical for such ransomware operations, and the group has shared a visual screenshot allegedly representing the breach. This incident underscores the ongoing risk to financial firms from highly organized cybercriminal groups such as LockBit3.