Ransomware Group intelligence
Lockbit2
InactiveTrack Lockbit2 with 1005 published victims and 5 known leak locations in a single intelligence view.
Overview
Lockbit2 is tracked by Breach House as a ransomware group with 1005 published victims.
Italy is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion |
| Leak location 2 | Onion service | Unknown | yq43odyrmzqvyezdindg2tokgogf3pn6bcdtvgczpz5a74tdxjbtk2yd.onion |
| Leak location 3 | Onion service | Unknown | oyarbnujct53bizjguvolxou3rmuda2vr72osyexngbdkhqebwrzsnad.onion |
| Leak location 4 | Onion service | Unknown | lockbitaptstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion |
| Leak location 5 | Onion service | Unknown | lockbitaptq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (1005)
Search, filter and paginate the victim timeline for Lockbit2. Showing 201–300 of 1005.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | asp.messina.it id3233 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | breadt id3228 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | baugeschaeft-bo... id3218 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | DavislandscapeL... id3217 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | lekise.com id3215 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | MAGNAR-EIKELAND... id3214 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ingesw.com id3212 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | compagniedephal... id3208 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | reitzner.de id3206 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | procab.se id3205 View details | Sweden | Communication / Marketing | — | |
|
No additional victim description available. |
|||||
| Ransomware | keisei-const.jp id3204 View details | Japan | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | jannone.it id3203 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | groupe-corbat.c... id3202 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | daumar.com id3201 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | tnmed.org id3200 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ssi-steel.com id3199 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rockportmusic id3196 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | gruppoathesis.i... id3194 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kainz-haustechn. id3193 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ville-sa id3192 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | inland-engineer... id3185 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | http://inland-e... id3183 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | enclosuresoluti... id3182 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | museum-dingo id3180 View details | NGOs / Associations | — | ||
|
No additional victim description available. |
|||||
| Ransomware | verifiedlabel.c... id3177 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cassinobuilding... id3176 View details | Construction / Real Estate | — | ||
|
No additional victim description available. |
|||||
| Ransomware | mpm.fr id3175 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | soharportandfre... id3173 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | radmangroup.com id3172 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kpcg.com.hk id3170 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cyberapex.com id3169 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | polyplastics.co... id3168 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.verifiedlab... id3166 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.mpm.fr id3165 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | www.cassinobuil... id3163 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | tpdrug.com id3162 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | heartlandhealth... id3161 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | applya.com id3160 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | get-greenenergy... id3157 View details | Energy | — | ||
|
No additional victim description available. |
|||||
| Ransomware | northstari id3156 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | inglotcosmetics... id3153 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | breadtalk.com id3152 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | lee-associate id3140 View details | United States | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | azcomputerlabs.... id3136 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | tokyo-plant.co.... id3134 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ruthtaubman.com id3133 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | lo id3130 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | groupemeunier.c... id3129 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | farmaciastatuto... id3128 View details | Agriculture / Food | — | ||
|
No additional victim description available. |
|||||
| Ransomware | lerros.com id3127 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.farmaciasta... id3125 View details | Agriculture / Food | — | ||
|
No additional victim description available. |
|||||
| Ransomware | spirit-ord.com id3124 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | l id3123 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sadeco.fr id3122 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | https://groupem... id3121 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | clinique.cob-os... id3120 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | anasia.co id3119 View details | Colombia | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | ch1 id3118 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ardeche.fr id3116 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | rosagroup.com id3115 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | genieroute.be id3114 View details | Belgium | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | tnt id3112 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | unholz.ch id3109 View details | Switzerland | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | feuerschutzbock... id3108 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | get-entkernung.... id3107 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wania.at id3101 View details | Austria | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | toothbuds.com id3100 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rnrinc.com id3099 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.wania.at id3098 View details | Austria | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | www.rnrinc.com id3097 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | vgoc.ca id3096 View details | Canada | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | http://www.toot... id3095 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | allcountysurvey... id3094 View details | Public Sector | — | ||
|
No additional victim description available. |
|||||
| Ransomware | gordoncounty.or... id3093 View details | Public Sector | — | ||
|
No additional victim description available. |
|||||
| Ransomware | scoular.com id3090 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ferrolabella id3089 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | westminster.de id3086 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | sep2.com id3085 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | noll-law.com id3084 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | gva-atencia.es id3083 View details | Spain | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | ascotlloyd.co.u... id3082 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | a-r-s.com id3081 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | n id3080 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wiegaarden.dk id3076 View details | Denmark | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | remar.com.ec id3075 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | nowiny id3074 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | oldenburgdeurbe... id3073 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | centralban id3072 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | greenexperts.co... id3071 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | eksltd.com id3070 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | fec-corp.com id3069 View details | Thailand | Services | — | |
|
No additional victim description available. |
|||||
| Ransomware | bazzisrl.it id3068 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | ledesma.com.ar id3065 View details | Argentina | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | liceu.barcelona id3063 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://liceu.b... id3058 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kssente id3041 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | studiobrazzale.... id3037 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | keypoint.com id3036 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | yachtcharterfle... id3035 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bafokengholding... id3034 View details | Other | — | ||
|
No additional victim description available. |
|||||