Ransomware Group intelligence
Lockbit3
InactiveTrack Lockbit3 with 2022 published victims and 42 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Lockbit3 is tracked by Breach House as a ransomware group with 2022 published victims.
United States is currently the most targeted country in this dataset.
42 known leak locations are currently associated with this group.
Leak Status Distribution
2020
- Leaked 93 4.6%
- Pending 1927 95.4%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (42)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 42 | Onion service | Up checked 26m ago | lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion |
| Leak location 27 | Onion service | Up checked 32m ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 29 | Onion service | Up checked 32m ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 39 | Onion service | Up checked 32m ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 41 | Onion service | Down checked 26m ago | lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43foocwmrzsokumqid.onion |
| Leak location 40 | Onion service | Down checked 26m ago | lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion |
| Leak location 38 | Onion service | Down checked 27m ago | lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion |
| Leak location 37 | Onion service | Down checked 28m ago | lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion |
| Leak location 36 | Onion service | Down checked 28m ago | lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion |
| Leak location 34 | Onion service | Down checked 28m ago | lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion |
| Leak location 35 | Onion service | Down checked 28m ago | lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion |
| Leak location 33 | Onion service | Down checked 29m ago | lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion |
| Leak location 32 | Onion service | Down checked 29m ago | lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion |
| Leak location 30 | Onion service | Down checked 30m ago | lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion |
| Leak location 31 | Onion service | Down checked 30m ago | lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion |
| Leak location 26 | Onion service | Down checked 31m ago | lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion |
| Leak location 28 | Onion service | Down checked 31m ago | ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion |
| Leak location 25 | Onion service | Down checked 32m ago | lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion |
| Leak location 24 | Onion service | Down checked 32m ago | lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion |
| Leak location 23 | Onion service | Down checked 33m ago | lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion |
| Leak location 22 | Onion service | Down checked 33m ago | lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion |
| Leak location 21 | Onion service | Down checked 34m ago | lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion |
| Leak location 20 | Onion service | Down checked 34m ago | lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion |
| Leak location 19 | Onion service | Down checked 34m ago | lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion |
| Leak location 18 | Onion service | Down checked 35m ago | lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion |
| Leak location 16 | Onion service | Down checked 35m ago | lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion |
| Leak location 17 | Onion service | Down checked 35m ago | lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion |
| Leak location 15 | Onion service | Down checked 36m ago | lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion |
| Leak location 14 | Onion service | Down checked 37m ago | lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion |
| Leak location 13 | Onion service | Down checked 37m ago | lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion |
| Leak location 12 | Onion service | Down checked 37m ago | lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion |
| Leak location 11 | Onion service | Down checked 38m ago | lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion |
| Leak location 9 | Onion service | Down checked 38m ago | lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion |
| Leak location 8 | Onion service | Down checked 38m ago | lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion |
| Leak location 6 | Onion service | Down checked 39m ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 10 | Onion service | Down checked 39m ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 7 | Onion service | Down checked 39m ago | lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion |
| Leak location 5 | Onion service | Down checked 40m ago | lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion |
| Leak location 4 | Onion service | Down checked 40m ago | lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion |
| Leak location 3 | Onion service | Down checked 40m ago | lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion |
| Leak location 2 | Onion service | Down checked 40m ago | lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion |
| Leak location 1 | Onion service | Down checked 41m ago | lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion |
Top Activity Sectors (17)
- Not identified 462
- Communication / Marketing 418
- Services 158
- Manufacturing / Engineering 144
- Finance / Legal / Insurance 141
- Healthcare / Pharma 108
- Education 92
- Construction / Real Estate 76
- IT 73
- Energy 69
- Public Sector 65
- Retail / E-commerce 57
- Transportation / Travel / Logistics 52
- Hospitality / Food & Beverage / Tourism 35
- Agriculture / Food 31
- Telecommunications 24
- NGOs / Associations 13
Typical Attacks (34)
▼How Lockbit3 typically operates, as attributed by MITRE ATT&CK v19.2. Attributed via LockBit 3.0.
-
What they do: LockBit 3.0 can use a compromised local account for lateral movement.
What that means: Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1059.001 PowerShell Execution
What they do: LockBit 3.0 can use PowerShell to apply Group Policy changes.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: LockBit 3.0 has the ability to directly call native Windows API items during execution.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
T1569.002 Service Execution Execution
What they do: LockBit 3.0 can use PsExec to execute commands and payloads.
What that means: Adversaries may abuse the Windows service control manager to execute malicious commands or payloads.
-
What they do: LockBit 3.0 can change the Registry values for Group Policy refresh time, to disable SmartScreen, and to disable Windows Defender.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
What they do: LockBit 3.0 can install system services for persistence.
What that means: Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence.
-
What they do: LockBit 3.0 can enable automatic logon through the `SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon` Registry key.
What that means: Adversaries may abuse features of Winlogon to execute DLLs and/or executables when a user logs in.
-
What they do: LockBit 3.0 can enable options for propogation through Group Policy Objects.
What that means: Adversaries may modify Group Policy Objects (GPOs) to subvert the intended discretionary access controls for a domain, usually with the intention of escalating privileges on the domain.
-
T1548.002 Bypass User Account Control Privilege Escalation
What they do: LockBit 3.0 can bypass UAC to execute code with elevated privileges through an elevated Component Object Model (COM) interface.
What that means: Adversaries may bypass UAC mechanisms to elevate process privileges on system.
-
T1027.002 Software Packing Stealth
What they do: LockBit 3.0 can use code packing to hinder analysis.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1027.013 Encrypted/Encoded File Stealth
What they do: The LockBit 3.0 payload includes an encrypted main component.
What that means: Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.
-
T1070.004 File Deletion Stealth
What they do: LockBit 3.0 can delete itself from disk.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1140 Deobfuscate/Decode Files or Information Stealth
What they do: The LockBit 3.0 payload is decrypted at runtime.
What that means: Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis.
-
T1218.003 CMSTP Stealth
What they do: LockBit 3.0 can attempt a CMSTP UAC bypass if it does not have administrative privileges.
What that means: Adversaries may abuse CMSTP to proxy execution of malicious code.
-
T1480 Execution Guardrails Stealth
What they do: LockBit 3.0 can make execution dependent on specific parameters including a unique passphrase and the system language of the targeted host not being found on a set exclusion list.
What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
-
T1480.002 Mutual Exclusion Stealth
What they do: LockBit 3.0 can create and check for a mutex containing a hash of the `MachineGUID` value at execution to prevent running more than one instance.
What that means: Adversaries may constrain execution or actions based on the presence of a mutex associated with malware.
-
What they do: LockBit 3.0 can check heap memory parameters for indications of a debugger and stop the flow of events to the attached debugger in order to hinder dynamic analysis.
What that means: Adversaries may employ various means to detect and avoid debuggers.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: LockBit 3.0 can disable security tools to evade detection including Windows Defender.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1685.005 Clear Windows Event Logs Defense Impairment
What they do: LockBit 3.0 can delete log files on targeted systems.
What that means: Adversaries may clear Windows Event Logs to hide the activity of an intrusion.
-
T1688 Safe Mode Boot Defense Impairment
What they do: LockBit 3.0 can reboot the infected host into Safe Mode.
What that means: Adversaries may abuse Windows safe mode to disable endpoint defenses.
-
T1057 Process Discovery Discovery
What they do: LockBit 3.0 can identify and terminate specific services.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1082 System Information Discovery Discovery
What they do: LockBit 3.0 can enumerate system hostname and domain.
What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
-
T1083 File and Directory Discovery Discovery
What they do: LockBit 3.0 can exclude files associated with core system functions from encryption.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1120 Peripheral Device Discovery Discovery
What they do: LockBit 3.0 has the ability to discover external storage devices.
What that means: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.
-
T1135 Network Share Discovery Discovery
What they do: LockBit 3.0 can identify network shares on compromised systems.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1614.001 System Language Discovery Discovery
What they do: LockBit 3.0 will not affect machines with language settings matching a defined exlusion list of mainly Eastern European languages.
What that means: Adversaries may attempt to gather information about the system language of a victim in order to infer the geographical location of that host.
-
T1680 Local Storage Discovery Discovery
What they do: LockBit 3.0 can enumerate local drive configuration.
What that means: Adversaries may enumerate local drives, disks, and/or volumes and their attributes like total or free space and volume serial number.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: LockBit 3.0 can use SMB for lateral movement.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1071.001 Web Protocols Command and Control
What they do: LockBit 3.0 can use HTTP to send victim host information to C2.
What that means: Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic.
-
T1132.001 Standard Encoding Command and Control
What they do: LockBit 3.0 can Base64-encode C2 communication.
What that means: Adversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect.
-
T1573.001 Symmetric Cryptography Command and Control
What they do: LockBit 3.0 can encrypt C2 communications with AES.
What that means: Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol.
-
T1486 Data Encrypted for Impact Impact
What they do: LockBit 3.0 can encrypt targeted data using the AES-256, ChaCha20, or RSA-2048 algorithms.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: LockBit 3.0 can terminate targeted processes and services related to security, backup, database management, and other applications that could stop or interfere with encryption.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: LockBit 3.0 can delete volume shadow copies.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (51)
▼Software Lockbit3 has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
Gosecretsdump
LaZagne
LostMyPassword
Mimikatz
NirSoft ExtPassword
PasswordFox
ProcDump
Veeam-Get-Creds
Defense evasion
Backstab/Process Explorer driver (BYOVD)
Defender Control
GMER
PCHunter
PowerTool
ProcessHacker
TDSSKiller
Discovery & enumeration
AdFind
Advanced IP Scanner
Advanced Port Scanner
Bloodhound
Seatbelt
SoftPerfect NetScan
Exfiltration
Anonfiles
FileZilla
FreeFileSync
File[.]io
MEGA
RClone
Sendspace
Temp[.]sh
Tempsend
Transfert-my-files
Transfer[.]sh
WinSCP
LOLBAS (living-off-the-land binaries)
BCDEdit
PsExec
Networking & tunnelling
Ligolo
Ngrok
Plink
Offensive security tooling
Cobalt Strike
Impacket
Koadic
Metasploit
PowerShell Empire
ThunderShell
Remote monitoring & management
Action1
AnyDesk
FixMeIt
ScreenConnect
Splashtop
TeamViewer
ZohoAssist
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Victims (2022)
Search, filter and paginate the victim timeline for Lockbit3. Showing 1201–1300 of 2022.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | metalnet.nl id6464 View details | Netherlands | Manufacturing / Engineering | pending | ||
|
Metalnet is a high-level supplier of machining operations. With our divisions for high-precision precision components and cost-effective fine mechanical parts, we are able to produce customer-oriented solutions for the most diverse industrial sectors... |
||||||
| Ransomware | plastictecnic.com id6453 View details | Malaysia | Manufacturing / Engineering | pending | ||
|
In the year 1976, Plastictecnic was founded by a group of businessmen as a private company that specializes in plastic injection business. Over the past 43 years, Plastictecnic has grown steadily with the Malaysian economy and has strongly positioned... |
||||||
| Ransomware | wings.travel id6452 View details | Transportation / Travel / Logistics | pending | |||
|
Wings has led the market in managing complex travel and support services worldwide, with particular expertise in developing markets and high-risk destinations. |
||||||
| Ransomware | ance.org.mx id6451 View details | Mexico | NGOs / Associations | pending | ||
|
ANCE is a nonprofit organization that offers inspection, standardization, certification, laboratory, calibration and training services. |
||||||
| Ransomware | airtac.com id6448 View details | Taiwan, Province of China | Communication / Marketing | pending | ||
|
AirTAC International Group, headquartered in Taiwan, founded in Taiwan in 1988, is a well-known pneumatic equipment supplier/manufacturer in the global market. AirTAC specializes in the production of actuators, control components, air preparation pro... |
||||||
| Ransomware | chinadailyhk.com id6447 View details | China | Telecommunications | pending | ||
|
About China Daily Founded in 1981, China Daily covers over 35 million readers and users worldwide through diversified platforms, including newspapers, websites, and mobiles and social media. The number of China Daily's followers has now reached over... |
||||||
| Ransomware | norcorp.com id6440 View details | Services | pending | |||
|
Founded in 1908, Northern Engraving Corporation is a leading supplier of nameplates and decorative trim to a variety of markets. Value-added services include in-house Design, Engineering, Program Management. |
||||||
| Ransomware | euskaltel.com id6437 View details | Spain | Telecommunications | pending | ||
|
The data was downloaded from mundo-r.comEuskaltel is a telecommunications group in northern Spain. The company operates via Euskaltel, R and Telecable. As a mobile phone operator with its own 4G license in the Basque Country, Galicia and Asturias... |
||||||
| Ransomware | mundo-r.com id6436 View details | Spain | Finance / Legal / Insurance | pending | ||
|
3TB of data downloaded. Financials, legal documents, customer, employee, and more. Also, about 100gb of euskaltel.com data was downloaded from this network. These will be published in the next post.R cable Spain is an operator of telecommunicat... |
||||||
| Ransomware | pikenursery.com id6435 View details | Communication / Marketing | pending | |||
|
We strive to take the guesswork out of gardening by providing our communities with the best horticultural knowledge, the best assortment of quality plants and garden related products that thrive in our climate, and thoughtful customer service. We are... |
||||||
| Ransomware | tool-temp.net id6434 View details | Communication / Marketing | pending | |||
|
Tool-Temp Limited is the sole UK distributor for the highly respected Swiss-made Tool-Temp range of temperature control devices.The company is recognised as a leading technical authority on process temperature control, with a strong track record... |
||||||
| Ransomware | troteclaser.com id6433 View details | Communication / Marketing | pending | |||
|
Trotec Laser makes laser users’ work simpler, faster and more profitable by setting new standards in laser machines. |
||||||
| Ransomware | bankbsi.co.id id6428 View details | Indonesia | Finance / Legal / Insurance | pending | ||
|
On May 8, we attacked Bank Syariah Indonesia, completely stopping all of its services. The management of the bank could not think of anything better than to brazenly lie to their customers and partners, reporting some kind of "technical work" being... |
||||||
| Ransomware | prolinerrescue.com id6424 View details | Communication / Marketing | pending | |||
|
Proliner is an independently owned and operated family business. Our staff is comprised of highly experienced, knowledgeable certified technicians. We take the time to know our customers needs. When you deal with us, you're not just a number, you're... |
||||||
| Ransomware | weberweber.at id6423 View details | Austria | Other | pending | ||
|
72 Jahre Versicherungserfahrung und 56 Jahre Wirtschaftskompetenz stehen Ihnen bei Weber & Weber zur Verfügung. Das geballte Know-how im Dienst unserer Kunden erlaubt uns zu agieren anstatt zu reagieren und somit Ihr Risiko zu minimieren. |
||||||
| Ransomware | viseg.com id6410 View details | Manufacturing / Engineering | pending | |||
|
We are leaders in the distribution of safety glass products. Company established since 1962, located in the industrial area of Funza.VISEG, has a monthly production capacity of 40,000 M2 tempered and 30,000 M2 laminated. Generating 97 direct jobs,... |
||||||
| Ransomware | wuppermann.com id6409 View details | Communication / Marketing | pending | |||
|
Produces hot-dip galvanized tubes and profiles with particularly high corrosion protection, especially for applications in the photovoltaic, construction and automotive industries. |
||||||
| Ransomware | tec-mex.com.mx id6408 View details | Mexico | Retail / E-commerce | pending | ||
|
TEC Electronica is a company that operates in the Consumer Electronics industry. Engages in the retail trade of consumer electronics and computers. |
||||||
| Ransomware | vuteq.mx id6407 View details | Mexico | Manufacturing / Engineering | pending | ||
|
We are a japanese company dedicated to the manufacturing of Door Trims, Consoles, Headliners and automotive interiors in general.Our process capabilities include plastic injection molding, upholstery cutting, sewing, wrapping, painting, automatic a... |
||||||
| Ransomware | metronottevigilanza.it id6405 View details | Italy | Communication / Marketing | pending | ||
|
Our mission is to address the issue of security at 360 degrees, proposing ourselves to companies, public bodies, small traders and private individuals. We operate in the armed private security sector, with Public Security authorization and thirty yea... |
||||||
| Ransomware | gocontec.com id6392 View details | Services | pending | |||
|
first part of data.Contec Holdings provides repair services to satellite, cable & IP based system operators, B2B, B2C, and E-commerce order fulfillment and logistics services, and in or out of warranty repair services for OEMs. |
||||||
| Ransomware | mbwswim.com id6389 View details | Hospitality / Food & Beverage / Tourism | pending | |||
|
LEADING GLOBAL SWIMWEAR, RESORTWEAR AND LOUNGEWEAR DESIGN AND MANUFACTURING COMPANYManhattan Beachwear’s design headquarters is based in Orange County, California. We proudly design beautiful swimwear and resortwear. Our brands include: La Blanca,... |
||||||
| Ransomware | interfides.de id6388 View details | Germany | Services | pending | ||
|
interfides Steuerberatungsgesellschaft mbH was established in 1978, and specialises in providing advisory services to foreign clients with a business presence in Germany. |
||||||
| Ransomware | hk-finance.pl id6377 View details | Poland | Finance / Legal / Insurance | pending | ||
|
LEADING PROVIDER OF ACCOUNTING, HR & PAYROLL, AND FINANCIAL CONSULTANCY SERVICES |
||||||
| Ransomware | cbelaw.com id6375 View details | Finance / Legal / Insurance | pending | |||
|
Cohen Buchan Edwards LLP is a full service law firm providing practical, client-oriented service that delivers results. For more than 40 years, an exceptional legal team of lawyers and staff have worked with both businesses and individuals to provide... |
||||||
| Ransomware | lssny.org id6369 View details | Services | pending | |||
|
Today, Lutheran Social Services of New York provides a myriad of social services, including helping seniors live independently, finding loving families for children, providing safe and affordable supportive housing, teaching students with special nee... |
||||||
| Ransomware | unity.edu id6368 View details | United States | Education | leaked | ||
|
Unity College is a private college based in New Gloucester, Maine with an additional campus in Unity and facilities in Moose River and Thorndike. It offers undergraduate and graduate education based on sustainability science that emphasizes study of... |
||||||
| Ransomware | stmarys.net id6367 View details | Education | pending | |||
|
St Mary’s Catholic School is part of the mission of the Catholic Church, which places the educational process in this setting.Complete database and file data exfiltrated.Failure to negotiate with us will result in FULL data publication. A... |
||||||
| Ransomware | astate.edu id6366 View details | United States | Public Sector | pending | ||
|
Founded in 1909, A-State meets the challenges of continuing as a destination university for more than 14,000 students through the combination of world-class research with a long tradition of student-friendly instruction. The second largest universit... |
||||||
| Ransomware | namibmills.com id6365 View details | Namibia | Communication / Marketing | pending | ||
|
Namib Mills Ltd, established in 1982, is the largest grain processing company in Namibia. It produces flour, pasta, animal feeds and other products from raw materials including maize, much of which is imported, and local varieties of pearl millet (ma... |
||||||
| Ransomware | marshallconstruction.co.uk id6364 View details | United Kingdom | Construction / Real Estate | pending | ||
|
MARSHALL CONSTRUCTIONEstablished in 1983 we are one of Scotland’s foremost independent building contractors |
||||||
| Ransomware | joysonsafety.com id6340 View details | Other | pending | |||
|
We took 20TB of data from the company and are publishing the name to encourage them to connect and discuss before we post all the data and cause irrepairable damage to the company. Write in tox https://tox.chat/download.html please 3085B89A0C515D2FB1... |
||||||
| Ransomware | layherna.com id6338 View details | Construction / Real Estate | pending | |||
|
Layher North America is a company that operates in the Construction industry.It employs 251-500 people and has $50M-$100M of revenue. The company is headquartered in Houston, Texas. |
||||||
| Ransomware | triaflex.at id6316 View details | Austria | Other | pending | ||
|
Welcome to TRIAFLEXWe design the ergonomic living space work! |
||||||
| Ransomware | cydsa.com id6312 View details | United States | Communication / Marketing | pending | ||
|
Cydsa, S.A.B. de C.V., together its subsidiaries, engages in the production and marketing of salt, chlorine, caustic soda, and refrigerant gases in Mexico, the United States, Canada, Central and South America, Asia, and Europe. |
||||||
| Ransomware | hasenauer-anlagenbau.at id6310 View details | Austria | Energy | pending | ||
|
QUALITY IS THE BESTWhen it comes to water, heating, cooling, air and climate, we always get to work with fresh wind and full motivation.We offer the highest professional quality at all levels – from planning to implementation. There is no differe... |
||||||
| Ransomware | baycrestpartners.com id6307 View details | Communication / Marketing | pending | |||
|
#NationalHazardAgencyWe stole 18 gigabytes of data and documents, including SQL databases and mail backups. You have two choices: pay us or leak 18 gigabytes of documentation.Contact us |
||||||
| Ransomware | cloud51.com id6306 View details | IT | pending | |||
|
Cloud 51 Data Solutions focuses on delivering proactive and preventative IT support and service solutions to small businesses locally and nationwide.It now serves more than 60 companies that have all been hacked. Each company had all their confiden... |
||||||
| Ransomware | logicalsolutions.bc.ca id6292 View details | Canada | Services | pending | ||
|
Logical Solutions is a full service systems contractor and integrator that employ trained sales people, systems specialists, field technicians and project managers. We handle communications projects from conceptual design to complete and operational... |
||||||
| Ransomware | conver-pack.com id6291 View details | United States | Communication / Marketing | pending | ||
|
ConverPack is a leading global manufacturer of single-use hot and cold paper cups and accessories. Since 2010, we have provided our customers with the highest quality and most cost-effective wholesale paper products made in the United States. Locate... |
||||||
| Ransomware | ourrelentlesschurch.com id6290 View details | Other | pending | |||
|
Relentless Church exists to share the news of Jesus Christ, disciple people, and build the whole person: mind, body & soul. |
||||||
| Ransomware | multimedica.it id6269 View details | Italy | Communication / Marketing | pending | ||
|
The MultiMedica Group First of all there is Ethics. It is not limited to a series of principles to be followed, but constitutes the overall vision of MultiMedica's activities, its mission, its raison d'être. And ethics means putting people and their... |
||||||
| Ransomware | bg2i.fr id6264 View details | France | Education | pending | ||
|
Bg2i is a company that operates in the Professional Training & Coaching industry. It employs 11-20 people and has $1M-$5M of revenue. The company is headquartered in France |
||||||
| Ransomware | silbon.es id6263 View details | Spain | Retail / E-commerce | pending | ||
|
SILBON is a men's fashion brand. It is geared towards updating classic men’s style, with a focus on formalwear. The company also has an online store that provides services internationally. Ven y descubre todas las secciones de nuestro blog: Stree... |
||||||
| Ransomware | fsdc.org.hk id6262 View details | Hong Kong | Finance / Legal / Insurance | pending | ||
|
Credit Cards & Transaction ProcessingFinancial Services Development Council is a company that operates in the Financial Services industry. It employs 11-20 people and has $10M-$25M of revenue. The company is headquartered in Hong Kong. |
||||||
| Ransomware | cdcbmestihl.com id6261 View details | United States | Energy | pending | ||
|
CDC BME STIHL Distributor is a distributor of STIHL outdoor power equipment. Marble Hill, Missouri, United States |
||||||
| Ransomware | imanor.gov.ma id6253 View details | Morocco | Other | pending | ||
|
Institut Marocain de Normalisation IMANOR |
||||||
| Ransomware | lhh.com.my id6252 View details | Malaysia | Communication / Marketing | pending | ||
|
For over 3 decades we have build an impressive geo-demographical knowledge base about local market conditions in Selangor and Kuala Lumpur, and in recent years have currently expanded our reach to North Malaysia. We have also developed an extensive n... |
||||||
| Ransomware | atlanticeye.net id6251 View details | Healthcare / Pharma | pending | |||
|
Atlantic Eye Center Optical is a full service optical dispensary in Cape May Court House, NJ.We exfiltrated the full database of the medical records for all patients + data exfiltrated from their file server.Failure to negotiate with us will... |
||||||
| Ransomware | peachtree-medical.com id6250 View details | United States | Healthcare / Pharma | pending | ||
|
Peachtree Medical Center is a medical practice located in Peachtree City and Newnan, Georgia.We exfiltrated the full database of the medical records for all patients + data exfiltrated from their file server.Failure to negotiate with us will... |
||||||
| Ransomware | ptow.com id6249 View details | Healthcare / Pharma | pending | |||
|
Physicians to Women is an OB GYN clinic in Roanoke, VA.We exfiltrated the full database of the medical records for all patients + data exfiltrated from their file server.Failure to negotiate with us will result in FULL data publication or auc... |
||||||
| Ransomware | sunnydesigns.com id6248 View details | Retail / E-commerce | pending | |||
|
Sunny Designs is a manufacturer and wholesale distributor of furniture and accessory items. We exfiltrated the sales database for all customers + data from their file server.Failure to negotiate with us will result in FULL data publication o... |
||||||
| Ransomware | fabeckarchitectes.lu id6246 View details | Luxembourg | Construction / Real Estate | pending | ||
|
FABECKARCHITECTS is competitive in the fields of architecture, urban planning, rehabilitation and renovation, interior architecture and design. |
||||||
| Ransomware | ddmontaza.hr id6245 View details | Croatia | Manufacturing / Engineering | pending | ||
|
Constructing and erecting power, petrochemical and industrial plants, bridges and steel structures. |
||||||
| Ransomware | ewwanfried.de id6244 View details | Germany | Energy | pending | ||
|
In our more than one hundred and ten years of history, we have constantly developed as a family business. Then as now, in times of the free electricity market, it is our goal to be available to the citizens of the cities of Wanfried and Treffurt as a... |
||||||
| Ransomware | summerweine.at id6243 View details | Austria | Other | pending | ||
|
Josef Summer's Erben Weinkellerei |
||||||
| Ransomware | vcclawservices.com id6242 View details | China | Finance / Legal / Insurance | pending | ||
|
Vivien Chan & Co. is a full-service law practice with offices in Hong Kong (1985) and Beijing (1993). We are consistently recognized as a premier law firm for and in Greater China. With over 35 years of doing business in Greater China, our Hong Kong... |
||||||
| Ransomware | keystonesmiles.org id6240 View details | Education | pending | |||
|
Keystone Smiles Community Learning Center, Inc. is a locally based daycare center that offers full-time child care and early education programs designed for young children. Located at 420 Main Street, the company serves families living in the Knox, P... |
||||||
| Ransomware | ultimateimageprinting.com id6232 View details | Communication / Marketing | pending | |||
|
Founded in 1980, Ultimate Image Printing is a full service commercial printing company located in Orange County, California. Since our inception, we have always believed that a print is not just ink on paper… it’s love, excitement, power… it’s commun... |
||||||
| Ransomware | goforcloud.com id6230 View details | IT | pending | |||
|
At Go For Cloud, you can count on a no-nonsense IT consulting team specialising in cloud solutions and flexible digital workplaces. We help you define your IT strategy and look for solutions that perfectly match your business needs. Our consultants w... |
||||||
| Ransomware | gruponutresa.com id6229 View details | Colombia | Communication / Marketing | pending | ||
|
Grupo Nutresa, formerly Grupo Nacional de Chocolates S.A. is a food-processing conglomerate headquartered in Medellín, Colombia. The group's principal activities are producing, distributing, and selling cold cuts, biscuits, chocolates, coffee, ice cr... |
||||||
| Ransomware | nagase.co.jp id6228 View details | Japan | Energy | pending | ||
|
1TB of dataNAGASE & CO., LTD. is a chemicals trading firm, founded in Kyoto, Japan in 1832. The NAGASE Group began as a specialized sales agent securing exclusive contracts to sell industry-leading products from around the world in Japan. Over th... |
||||||
| Ransomware | abro.se id6227 View details | Sweden | Other | pending | ||
|
136gb |
||||||
| Ransomware | baffetmateriaux.fr id6223 View details | France | Construction / Real Estate | pending | ||
|
Chain selling construction and DIY materials and interior and exterior fittings. |
||||||
| Ransomware | midipapierspeints.fr id6222 View details | France | Communication / Marketing | pending | ||
|
Our family adventure began in 1951 in Toulouse, around a passion, that of painting , wallpaper and wall and floor coverings , and an ambition: to provide quality products to professionals as well as to individuals. .Today, the friendly and family s... |
||||||
| Ransomware | esinsa.com id6220 View details | Manufacturing / Engineering | pending | |||
|
Esinsa is a company that operates in the Machinery industry. It employs 21-50 people and has $10M-$25M of revenue. |
||||||
| Ransomware | gpglobal.com id6219 View details | Services | pending | |||
|
GP Global enables economic development by offering bespoke solutions to satisfy the commodity needs of businesses and communities worldwide. GP Global is an integrated energy services provider, product manufacturer and a recognised brand globally. |
||||||
| Ransomware | apolloscientific.co.uk id6218 View details | United Kingdom | Manufacturing / Engineering | pending | ||
|
Specialists in the manufacture and supply of aromatic, heterocyclic and aliphatic compounds, fluorochemicals and life sciences reagents, offering unrivalled service and expertise in the sourcing and manufacture of available and novel products. |
||||||
| Ransomware | yateemgroup.com id6217 View details | Communication / Marketing | pending | |||
|
Yateem Optician has been in the vision care industry for over a century now. Spread across the Middle East with over 80 state-of-the-art showrooms, we cater to a diverse clientele. Experienced optometrists, availability of quality ophthalmic lenses |
||||||
| Ransomware | kse.org.kw id6216 View details | Kuwait | Communication / Marketing | pending | ||
|
The Kuwait Society of Engineers is an independent professional society that represents engineers in Kuwait |
||||||
| Ransomware | tiger.jp id6215 View details | Japan | Public Sector | pending | ||
|
Tiger Corporation (lit= Tiger Vacuum Flask [Magic-jar] Corporation) is a Japanese manufacturer that applies vacuum insulation and heat control technology to consumer electronic appliances. Their headquarters are located in Kadoma City in Osaka, Japan |
||||||
| Ransomware | bigc.co.th id6214 View details | Viet Nam | Retail / E-commerce | pending | ||
|
Big C is a grocery and general merchandising retailer headquartered in Bangkok, Thailand.Big C is as of 2016 Thailand's second-largest hypermarket operator after Lotus's.It has operations in four countries, namely Thailand, Vietnam, Laos and Camb... |
||||||
| Ransomware | fullertonindia.com id6213 View details | India | Communication / Marketing | pending | ||
|
Founded in 1994 and headquartered in Mumbai, India, Fullerton India Credit Company Limited provides financial solutions. The Company offers commercial vehicle, home improvement, personal, and property loans.As a result of a successful attack on t... |
||||||
| Ransomware | norton.com.ar id6209 View details | Argentina | Services | pending | ||
|
The company refused to negotiate further.If the management doesn't care about their data, then we don't care either.) |
||||||
| Ransomware | floraalpina.ch id6207 View details | Switzerland | Hospitality / Food & Beverage / Tourism | pending | ||
|
Seminarhotel FloraAlpina, nestled in Vitznau among beautifully designed parkland, the brainchild of landscape gardener Gustav Ammann. |
||||||
| Ransomware | stuertz.com id6198 View details | Services | pending | |||
|
Stürtz designs and manufactures a wide variety of window manufacturing solutions today and looks forward to developing new solutions as our markets continue to mature. |
||||||
| Ransomware | soshin.co.jp id6194 View details | Japan | Manufacturing / Engineering | pending | ||
|
Soshin Electric has been providing capacitors, filters, circuit parts, etc. to the market for 84 years since its establishment. These are used in a wide range of fields, from various power infrastructures and industrial equipment to personal terminal... |
||||||
| Ransomware | ibp.com.br id6193 View details | Brazil | Other | pending | ||
|
Founded in 1971, Indústria de Bebidas Paris began its history called Caninha da Roça Indústria e Comércio Ltda, for developing Caninha da Roça cachaça, currently the most consumed caninha in Rio de Janeiro. It was only in 1998 that the company was re... |
||||||
| Ransomware | pkffinconta.ro id6192 View details | Romania | Communication / Marketing | pending | ||
|
The PKF Finconta Group consists of four companies with Romanian capital: PKF Finconta, PKF Finconta Consultanță, PKF Finconta HR, and Finconta Consulting SPRL, members of the national professional bodies CECCAR, CAFR, CCFR and UNPIR. Through these co... |
||||||
| Ransomware | soapro.ao id6191 View details | Angola | Communication / Marketing | pending | ||
|
The Soapro Group is an Angolan Group with 29 years of experience in the fields of architecture, engineering, urban planning and environment, operating in the areas of studies and projects, construction management, consulting and auditing.. |
||||||
| Ransomware | tubosreunidosgroup.com id6190 View details | Manufacturing / Engineering | pending | |||
|
We develop and manufacture seamless steel tubes in stainless steel, high-alloy and carbon grades for all processes and requirements. |
||||||
| Ransomware | intuview.com id6188 View details | IT | pending | |||
|
IntuView is an innovative software company, dedicated to development of "artificial intuition" software for real-time analysis of unstructured text in domains relating to Homeland Security and Counter-Terrorism and semantic analysis of data carrying... |
||||||
| Ransomware | crossinggroup.com id6174 View details | Energy | pending | |||
|
The Crossing Group is one of the largest trenchless construction companies in North America. We specialize in providing the energy, municipal, civil and utility sectors with the integrated, full-service offering of solutions required to overcome the... |
||||||
| Ransomware | bancodevenezuela.com id6173 View details | Venezuela, Bolivarian Republic of | Finance / Legal / Insurance | pending | ||
|
We are an institution with a long history in the national financial system. Founded at the end of the 19th century, we had the responsibility of issuing coins until 1939 when the Central Bank of Venezuela was created.We are leaders in operating poi... |
||||||
| Ransomware | sommer.eu id6172 View details | Telecommunications | pending | |||
|
SOMMER is one of Europe's leading manufacturers of high-quality garage door openers and wireless control systems. The SOMMER Group is active globally with its own branch offices and representatives.Our hardware and software is developed completely... |
||||||
| Ransomware | jaco.com id6171 View details | Energy | pending | |||
|
Jaco Oil Company established since 1967; has grown into a diverse operation over the years. The Company is privately owned and focuses on the management of Brooke Utilities, Fastrip Financial, Fastrip Food Stores, Instant Storage, and Wholesale Fuels... |
||||||
| Ransomware | gizavc.com id6170 View details | Israel | Services | pending | ||
|
Giza has been at the forefront of Israeli's Venture Capital industry for more than 20 years, supporting innovative entrepreneurs and helping them to build great businesses.Since its establishment in 1992, Giza has placed over $0.6 billion into more... |
||||||
| Ransomware | garrotbros.com id6169 View details | Other | pending | |||
|
Your negotiator continues ingenious waiting tactic. Blame him when leak happens :) |
||||||
| Ransomware | sbhc.us id6168 View details | United States | Healthcare / Pharma | pending | ||
|
Southwest Behavioral Health Center (SBHC), created in 1986, is a public provider of comprehensive, integrated mental health and addiction services, offering outpatient, residential, school-based, and community-based programs and services to individua... |
||||||
| Ransomware | thesoftwareconsultinggroup.com id6156 View details | Services | pending | |||
|
SCG is an independent licensing advisory firm that helps private and public organizations around the world understand, navigate and manage their software licensing. Our leading services and solutions reduce your costs, mitigate risk, and improve oper... |
||||||
| Ransomware | pinelandschool.org id6148 View details | Education | pending | |||
|
64gb |
||||||
| Ransomware | joriszorg.nl id6147 View details | Netherlands | Other | pending | ||
|
100gb |
||||||
| Ransomware | hkiff.org.hk id6146 View details | Hong Kong | Communication / Marketing | pending | ||
|
The Hong Kong International Film Festival Society (HKIFFS) is a charitable, non-profit and non-governmental organisation dedicated to the discovery and promotion of creativity in the art and culture of film. |
||||||
| Ransomware | brl.fr id6143 View details | France | Construction / Real Estate | pending | ||
|
BRL Ingénierie is a subsidiary company belonging to the BRL Group, originally founded in 1955 to support the economic development of the Languedoc-Roussillon region in southern France by designing, building and managing large-scale water infrastructu... |
||||||
| Ransomware | alpine4u.com id6142 View details | Communication / Marketing | pending | |||
|
Alpine Corporation is one of America's leading designers, importers, and distributors of superior quality home and garden decor products. It offers one of the broadest assortments of decorative garden products available in the industry. |
||||||
| Ransomware | osg.co.jp id6131 View details | United States | Retail / E-commerce | pending | ||
|
In 1968, OSG Corporation established its very first overseas subsidiary in the United States. Since then, we have built a production, sales and technical support network spanning 33 countries. All of our facilities are optimally located to serve our... |
||||||
| Ransomware | knvb.nl id6130 View details | Netherlands | NGOs / Associations | pending | ||
|
305gb.The Royal Dutch Football Association is the governing body of football in the Netherlands. It organises the main Dutch football leagues, the amateur leagues, the KNVB Cup, and the Dutch men's and women's national teams. |
||||||
| Ransomware | ktbs.com id6129 View details | United States | Communication / Marketing | pending | ||
|
KTBS-TV (Channel 3) is a television station in Shreveport, Louisiana, United States, affiliated with ABC. The station is owned by local KTBS, LLC (owned by Wray Properties Trust, which is operated by Betty Ray Anderson, John D. Ray and Edwin N. Ray J... |
||||||
| Ransomware | homeandhearthealth.com id6128 View details | Healthcare / Pharma | pending | |||
|
I apologize for attacking your medical facility and issue a free decryptor, the partner who attacked you is blocked. http://***.onion/r/jVSadFeWyJ#qH8hVa3hIF/nzdKjgwoY4i9j4OSZM/tfYjEdgrkpT8I= |
||||||
| Ransomware | fameline.com id6127 View details | Communication / Marketing | pending | |||
|
Fameline is a leader in the field of innovative products for the decoration of buildings. and architectural design We're not just brand owners. But we are designers, manufacturers, distributors, and installers. We attach great importance to the produ... |
||||||