Ransomware Group intelligence
Lockbit2
InactiveTrack Lockbit2 with 1005 published victims and 5 known leak locations in a single intelligence view.
Overview
Lockbit2 is tracked by Breach House as a ransomware group with 1005 published victims.
Italy is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion |
| Leak location 2 | Onion service | Unknown | yq43odyrmzqvyezdindg2tokgogf3pn6bcdtvgczpz5a74tdxjbtk2yd.onion |
| Leak location 3 | Onion service | Unknown | oyarbnujct53bizjguvolxou3rmuda2vr72osyexngbdkhqebwrzsnad.onion |
| Leak location 4 | Onion service | Unknown | lockbitaptstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion |
| Leak location 5 | Onion service | Unknown | lockbitaptq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (1005)
Search, filter and paginate the victim timeline for Lockbit2. Showing 801–900 of 1005.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | weber-betonpump... id1596 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | aisc-airbus.com id1595 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | watermarkbeachr... id1594 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dusa.com.ve id1590 View details | Venezuela, Bolivarian Republic of | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | cobabebrothers.... id1585 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | parkertide.com id1584 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | jaykaltrading.c... id1583 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sapphiredentalc... id1582 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | atsgruppo.eu id1581 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | generalplumbing... id1580 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | weyers-architek... id1579 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | reust.ch id1578 View details | Switzerland | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | isvo.it id1577 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | kacyumara.com.b... id1576 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sides.fr id1569 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | transdev.com id1567 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | maisonlaprise.c... id1565 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | moonnurseries.c... id1564 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | barreaudecharle... id1561 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://moonnur... id1560 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://barreau... id1559 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rivercityrental... id1513 View details | Public Sector | — | ||
|
No additional victim description available. |
|||||
| Ransomware | nuevomundosa.co... id1512 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | aktieinvest.se id1511 View details | Sweden | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | estampa.com.pa id1510 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | riviana.com id1508 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wormingtonlegal... id1507 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dcaa.gov.ae id1506 View details | United Arab Emirates | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | yankey.com.tw id1505 View details | Taiwan, Province of China | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | adlinktech.com id1504 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | E.M.I.T. Aviati... id1503 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | chipsaway.at id1502 View details | Austria | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | brident.com/en-... id1501 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | houstonestatepl... id1497 View details | Construction / Real Estate | — | ||
|
No additional victim description available. |
|||||
| Ransomware | newhotel.com id1494 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | fugybat.fr id1493 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | nitropiso.com.m... id1492 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | texasacehvac.co... id1491 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | transrendufense... id1490 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | geda-produkte.d... id1489 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | amista.cz id1484 View details | Czechia | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | sheraton.marrio... id1483 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rabbalshedekraf... id1482 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hoistcrane.com id1480 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wortmann.de id1476 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | alderking.com id1475 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.wor... id1473 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | anasia.com id1472 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | vlastuin.nl id1471 View details | Netherlands | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | USA company id1470 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | iibg.ca id1463 View details | Canada | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | scisairsecurity... id1457 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | advantecmfs.com id1456 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | peabodyproperti... id1455 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dataspeed.it id1454 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | jaylon.com.au id1447 View details | Australia | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | franklinempire.... id1446 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | papierswhitebir... id1445 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | daylewis.co.uk id1443 View details | United Kingdom | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | buffingtonlawfi... id1442 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sete.co.uk id1441 View details | United Kingdom | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | www.daylewis.co... id1439 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.buf... id1438 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | robsonstreet.ca id1437 View details | Canada | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | tes-amm.com id1436 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | jplegal.net id1430 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hotelservicepro... id1429 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | drhrlaw.com id1428 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | esopro.com id1427 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hoffsuemmer.de id1426 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | wijnendeclerck.... id1425 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ebarc.adv.br id1424 View details | Brazil | Hospitality / Food & Beverage / Tourism | — | |
|
No additional victim description available. |
|||||
| Ransomware | shop.jerryleigh... id1423 View details | Retail / E-commerce | — | ||
|
No additional victim description available. |
|||||
| Ransomware | j-addington.com id1422 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | johncockerillin... id1408 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ds.net.au id1407 View details | Australia | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | marriott.com/ho... id1406 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | iiservz.com id1405 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | drsdoors.com id1402 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | westernspirits.... id1401 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | noone.com.au id1400 View details | Australia | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | glenroy.com id1399 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dykman.com id1398 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ibes-gmbh.de id1397 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | grupowec.com id1396 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | denark.com id1395 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | 51talk.com id1394 View details | Philippines | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | northstarak.com id1393 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | novotech.com id1392 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | agmfinancial.co... id1391 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | abcp.org.br id1390 View details | Brazil | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | nrpa.org id1389 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | riscossa.it id1387 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | mitchellsternla... id1385 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | coldwellbankerh... id1384 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | miller-rose.com id1377 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | atstrack.com id1376 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rlsblaw.com id1369 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cimico.net id1368 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://cimico.... id1358 View details | Other | — | ||
|
No additional victim description available. |
|||||