Ransomware Group intelligence
Lockbit2
InactiveTrack Lockbit2 with 1005 published victims and 5 known leak locations in a single intelligence view.
Overview
Lockbit2 is tracked by Breach House as a ransomware group with 1005 published victims.
Italy is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion |
| Leak location 2 | Onion service | Unknown | yq43odyrmzqvyezdindg2tokgogf3pn6bcdtvgczpz5a74tdxjbtk2yd.onion |
| Leak location 3 | Onion service | Unknown | oyarbnujct53bizjguvolxou3rmuda2vr72osyexngbdkhqebwrzsnad.onion |
| Leak location 4 | Onion service | Unknown | lockbitaptstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion |
| Leak location 5 | Onion service | Unknown | lockbitaptq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (1005)
Search, filter and paginate the victim timeline for Lockbit2. Showing 1–100 of 1005.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | datalit.it id3692 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | oak-brook.org id3685 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ecos-office.com id3671 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | coteg-azam.fr id3670 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | sigma-alimentos... id3668 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | farmaciacirici.... id3667 View details | Agriculture / Food | — | ||
|
No additional victim description available. |
|||||
| Ransomware | agricolaandrea.... id3666 View details | Agriculture / Food | — | ||
|
No additional victim description available. |
|||||
| Ransomware | business.gov.om id3665 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | builditinc.com id3664 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rhenus.group id3663 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kuwaitairways.c... id3662 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | plagepalace.com id3661 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | emprint.com id3660 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | acac.com id3659 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | optoma id3658 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | vectorinf.com.b... id3657 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | tb-kawashima.co... id3656 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | lundinroof.com id3655 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | keisei- id3653 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.tb-... id3652 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | http://www.lund... id3651 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bestatt id3650 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bestattung- id3648 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ardebolassessor id3647 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dgi.gouv.ml id3644 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | medcoenergi.com id3641 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | genusplc.com id3640 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | enclosuresoluti id3639 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.dgi... id3638 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | gruppowasteital... id3637 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ptg.com.au id3625 View details | Australia | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | slgienergy.com id3622 View details | Energy | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sanvitale.r id3621 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ses id3620 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.vectorinf.c... id3616 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cargoexperts.eu id3615 View details | Transportation / Travel / Logistics | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kaisoten.co.jp id3614 View details | Japan | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | virtus- id3611 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | equis.com id3606 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | gpml id3605 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.equ... id3604 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | mandiant.com id3602 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kan id3601 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sesver.gob.mx id3600 View details | Mexico | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | patralogistik.c... id3599 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | linmark.com id3598 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hyatts.com id3597 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | IBRCN.COM id3596 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kansashighwaypa... id3595 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bestattung-walz... id3594 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | vainieritraspor... id3593 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rosagroup id3592 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wik-group.com id3590 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | specpharm.co.za id3589 View details | South Africa | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | ora.com id3588 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | colonail.com id3587 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | familyclinicbri... id3586 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sport id3583 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | closetheloopeu.... id3579 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | jewelry.or id3578 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | compagniedep id3577 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hilltopconstruc id3576 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cepima id3575 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bradfo id3572 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | intertabak.com id3563 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | inla id3562 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | tcpharmachem.co... id3561 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | gpmlife.com id3560 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | foxconnbc.com id3559 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | koenigstahl.pl id3558 View details | Poland | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | pauly.de id3557 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | hospitalsanjose... id3556 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kerrylog id3546 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | skinnertran id3545 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ils.theinnovate... id3544 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | edm-stone.com id3541 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | pointsbet.com id3529 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | vitalprev.com.b... id3524 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.vit... id3523 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | pet-link.com id3522 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kuwaitflourmill... id3521 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | erdwaerme-gruen... id3520 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | architectenbure... id3519 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.intertabak.... id3515 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | virtus-advocate... id3514 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | berschneider.de id3499 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | etrp id3498 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | reitzner id3497 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | seatarrabida.pt id3494 View details | Portugal | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | focusadventure.. id3493 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bsm.upf.ed id3490 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | salumificiovene... id3489 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | de id3488 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | firbarcarolo.it id3486 View details | Italy | Hospitality / Food & Beverage / Tourism | — | |
|
No additional victim description available. |
|||||
| Ransomware | morrisonexpress... id3484 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bata id3483 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | skinnertrans.ne... id3480 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | gymund.dk id3479 View details | Denmark | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | groupe-trouille... id3476 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | gdctax.com.au id3475 View details | Australia | Other | — | |
|
No additional victim description available. |
|||||