Ransomware Group intelligence
Lockbit2
InactiveTrack Lockbit2 with 1005 published victims and 5 known leak locations in a single intelligence view.
Overview
Lockbit2 is tracked by Breach House as a ransomware group with 1005 published victims.
Italy is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion |
| Leak location 2 | Onion service | Unknown | yq43odyrmzqvyezdindg2tokgogf3pn6bcdtvgczpz5a74tdxjbtk2yd.onion |
| Leak location 3 | Onion service | Unknown | oyarbnujct53bizjguvolxou3rmuda2vr72osyexngbdkhqebwrzsnad.onion |
| Leak location 4 | Onion service | Unknown | lockbitaptstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion |
| Leak location 5 | Onion service | Unknown | lockbitaptq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (1005)
Search, filter and paginate the victim timeline for Lockbit2. Showing 501–600 of 1005.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | watermark id2577 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | tyresolesdobras... id2574 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kainz-haustechn... id2573 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | aisc-airbus. id2571 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dap.gov.tr id2570 View details | Türkiye | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | botafogo.ind.br id2564 View details | Brazil | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | prefimetal.com id2563 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | COFRAP ESPAÑOLA... id2562 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | progereal.com id2561 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | castro-urdiales... id2560 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cometgroup id2558 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hotelcedres.com id2557 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | maisonlaprise.c. id2556 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bar2.co.uk id2555 View details | United Kingdom | Hospitality / Food & Beverage / Tourism | — | |
|
No additional victim description available. |
|||||
| Ransomware | ametisfacilitie... id2554 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ukrl.co.uk id2553 View details | United Kingdom | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | dectro.com id2552 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | savonia.fi id2551 View details | Finland | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | rabba id2550 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Ourense do Bras... id2546 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | siamdial.com id2545 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | nfcaa.org id2544 View details | United States | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | fivestarproduct... id2543 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | udmercy.edu id2542 View details | United States | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | paybito.com id2540 View details | India | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | wolfbergal id2536 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ci.hercules.ca.... id2535 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | elmonterv.com id2527 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | estpm.fr id2524 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | girlguidinglase... id2523 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | justice.fr id2522 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | heubeck.de id2521 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | saintcloud.fr id2520 View details | France | IT | — | |
|
No additional victim description available. |
|||||
| Ransomware | joda.de id2519 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | ambau-team.de id2518 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | laponte.it id2517 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | vbhlaw.com id2516 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | isnardi.it id2515 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | optimissa.com id2514 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | plainviewmn.com id2512 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | mfkmakina.com id2480 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kentkonut.com.t... id2479 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | peabo id2478 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bagbyelevator.c... id2476 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | r id2475 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | onlinesalespro.... id2473 View details | Retail / E-commerce | — | ||
|
No additional victim description available. |
|||||
| Ransomware | efile.com id2472 View details | United States | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | ged id2469 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bayview.com id2468 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | roemer-lueftung. id2467 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | harrisshelton.c... id2464 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | izo.es id2463 View details | Spain | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | bannerbuzz.com id2462 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | huntsville4rent... id2458 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | centralbankfl.c... id2454 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | khattarlaw.com id2449 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | fairnessforall.... id2448 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | supersave.ca id2434 View details | Canada | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | northsideplumbi... id2426 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bernheim.org id2425 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | amerplumb.com id2424 View details | United States | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | torann-france.f... id2423 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | securiteassuran... id2422 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | focusadventure.... id2411 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | giovanardi.it id2410 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | owenscaroli id2409 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | mcsmorandi.com id2405 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | chervongroup.co... id2402 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cbibanks.com id2401 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | salesiancollege... id2400 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bricofer.it id2370 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | atsair.com id2369 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | thalesgroup.com id2363 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | empireins.com id2361 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | aulss6.veneto.i... id2360 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | lee-associates.... id2332 View details | United States | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | independentprin... id2330 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.lee... id2329 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rightsys.com id2328 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | grupomakler.com id2327 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | smiimaging.com id2286 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | riverhead.net id2285 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cgm.com id2284 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | lozzaspa.it id2281 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | sintesiautomoti... id2280 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cbjblawfirm.com id2279 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | burgsimpson.com id2274 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | atskorea.co.kr id2272 View details | Korea, Republic of | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | pestbusters.com... id2271 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hajery.com id2260 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.hajery.com id2259 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | maibroker.com id2258 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.maibroker.c... id2257 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | lipinskilogging... id2256 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dcashpro.com id2255 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | piolax.co.th id2254 View details | Thailand | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | urbandevelop.co... id2253 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cunninghamgolfc... id2188 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | baa.legal id2187 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | skinnertrans.co... id2186 View details | Other | — | ||
|
No additional victim description available. |
|||||