Ransomware Group intelligence
Lockbit3
InactiveTrack Lockbit3 with 2022 published victims and 42 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Lockbit3 is tracked by Breach House as a ransomware group with 2022 published victims.
United States is currently the most targeted country in this dataset.
42 known leak locations are currently associated with this group.
Leak Status Distribution
2020
- Leaked 93 4.6%
- Pending 1927 95.4%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (42)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 27 | Onion service | Up checked 6h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 29 | Onion service | Up checked 6h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 39 | Onion service | Up checked 6h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 42 | Onion service | Down checked 6h ago | lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion |
| Leak location 40 | Onion service | Down checked 6h ago | lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion |
| Leak location 41 | Onion service | Down checked 6h ago | lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43foocwmrzsokumqid.onion |
| Leak location 37 | Onion service | Down checked 6h ago | lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion |
| Leak location 38 | Onion service | Down checked 6h ago | lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion |
| Leak location 36 | Onion service | Down checked 6h ago | lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion |
| Leak location 35 | Onion service | Down checked 6h ago | lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion |
| Leak location 34 | Onion service | Down checked 6h ago | lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion |
| Leak location 33 | Onion service | Down checked 6h ago | lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion |
| Leak location 32 | Onion service | Down checked 6h ago | lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion |
| Leak location 30 | Onion service | Down checked 6h ago | lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion |
| Leak location 31 | Onion service | Down checked 6h ago | lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion |
| Leak location 25 | Onion service | Down checked 6h ago | lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion |
| Leak location 28 | Onion service | Down checked 6h ago | ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion |
| Leak location 26 | Onion service | Down checked 6h ago | lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion |
| Leak location 24 | Onion service | Down checked 6h ago | lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion |
| Leak location 21 | Onion service | Down checked 6h ago | lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion |
| Leak location 22 | Onion service | Down checked 6h ago | lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion |
| Leak location 23 | Onion service | Down checked 6h ago | lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion |
| Leak location 19 | Onion service | Down checked 6h ago | lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion |
| Leak location 20 | Onion service | Down checked 6h ago | lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion |
| Leak location 18 | Onion service | Down checked 6h ago | lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion |
| Leak location 15 | Onion service | Down checked 6h ago | lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion |
| Leak location 17 | Onion service | Down checked 6h ago | lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion |
| Leak location 16 | Onion service | Down checked 6h ago | lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion |
| Leak location 14 | Onion service | Down checked 6h ago | lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion |
| Leak location 13 | Onion service | Down checked 6h ago | lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion |
| Leak location 11 | Onion service | Down checked 6h ago | lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion |
| Leak location 12 | Onion service | Down checked 6h ago | lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion |
| Leak location 9 | Onion service | Down checked 6h ago | lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion |
| Leak location 7 | Onion service | Down checked 6h ago | lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion |
| Leak location 8 | Onion service | Down checked 6h ago | lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion |
| Leak location 5 | Onion service | Down checked 6h ago | lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion |
| Leak location 6 | Onion service | Down checked 6h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 10 | Onion service | Down checked 6h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 4 | Onion service | Down checked 6h ago | lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion |
| Leak location 2 | Onion service | Down checked 6h ago | lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion |
| Leak location 3 | Onion service | Down checked 6h ago | lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion |
| Leak location 1 | Onion service | Down checked 6h ago | lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion |
Top Activity Sectors (17)
- Not identified 462
- Communication / Marketing 418
- Services 158
- Manufacturing / Engineering 144
- Finance / Legal / Insurance 141
- Healthcare / Pharma 108
- Education 92
- Construction / Real Estate 76
- IT 73
- Energy 69
- Public Sector 65
- Retail / E-commerce 57
- Transportation / Travel / Logistics 52
- Hospitality / Food & Beverage / Tourism 35
- Agriculture / Food 31
- Telecommunications 24
- NGOs / Associations 13
Typical Attacks (34)
▼How Lockbit3 typically operates, as attributed by MITRE ATT&CK v19.2. Attributed via LockBit 3.0.
-
What they do: LockBit 3.0 can use a compromised local account for lateral movement.
What that means: Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1059.001 PowerShell Execution
What they do: LockBit 3.0 can use PowerShell to apply Group Policy changes.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: LockBit 3.0 has the ability to directly call native Windows API items during execution.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
T1569.002 Service Execution Execution
What they do: LockBit 3.0 can use PsExec to execute commands and payloads.
What that means: Adversaries may abuse the Windows service control manager to execute malicious commands or payloads.
-
What they do: LockBit 3.0 can change the Registry values for Group Policy refresh time, to disable SmartScreen, and to disable Windows Defender.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
What they do: LockBit 3.0 can install system services for persistence.
What that means: Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence.
-
What they do: LockBit 3.0 can enable automatic logon through the `SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon` Registry key.
What that means: Adversaries may abuse features of Winlogon to execute DLLs and/or executables when a user logs in.
-
What they do: LockBit 3.0 can enable options for propogation through Group Policy Objects.
What that means: Adversaries may modify Group Policy Objects (GPOs) to subvert the intended discretionary access controls for a domain, usually with the intention of escalating privileges on the domain.
-
T1548.002 Bypass User Account Control Privilege Escalation
What they do: LockBit 3.0 can bypass UAC to execute code with elevated privileges through an elevated Component Object Model (COM) interface.
What that means: Adversaries may bypass UAC mechanisms to elevate process privileges on system.
-
T1027.002 Software Packing Stealth
What they do: LockBit 3.0 can use code packing to hinder analysis.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1027.013 Encrypted/Encoded File Stealth
What they do: The LockBit 3.0 payload includes an encrypted main component.
What that means: Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.
-
T1070.004 File Deletion Stealth
What they do: LockBit 3.0 can delete itself from disk.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1140 Deobfuscate/Decode Files or Information Stealth
What they do: The LockBit 3.0 payload is decrypted at runtime.
What that means: Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis.
-
T1218.003 CMSTP Stealth
What they do: LockBit 3.0 can attempt a CMSTP UAC bypass if it does not have administrative privileges.
What that means: Adversaries may abuse CMSTP to proxy execution of malicious code.
-
T1480 Execution Guardrails Stealth
What they do: LockBit 3.0 can make execution dependent on specific parameters including a unique passphrase and the system language of the targeted host not being found on a set exclusion list.
What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
-
T1480.002 Mutual Exclusion Stealth
What they do: LockBit 3.0 can create and check for a mutex containing a hash of the `MachineGUID` value at execution to prevent running more than one instance.
What that means: Adversaries may constrain execution or actions based on the presence of a mutex associated with malware.
-
What they do: LockBit 3.0 can check heap memory parameters for indications of a debugger and stop the flow of events to the attached debugger in order to hinder dynamic analysis.
What that means: Adversaries may employ various means to detect and avoid debuggers.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: LockBit 3.0 can disable security tools to evade detection including Windows Defender.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1685.005 Clear Windows Event Logs Defense Impairment
What they do: LockBit 3.0 can delete log files on targeted systems.
What that means: Adversaries may clear Windows Event Logs to hide the activity of an intrusion.
-
T1688 Safe Mode Boot Defense Impairment
What they do: LockBit 3.0 can reboot the infected host into Safe Mode.
What that means: Adversaries may abuse Windows safe mode to disable endpoint defenses.
-
T1057 Process Discovery Discovery
What they do: LockBit 3.0 can identify and terminate specific services.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1082 System Information Discovery Discovery
What they do: LockBit 3.0 can enumerate system hostname and domain.
What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
-
T1083 File and Directory Discovery Discovery
What they do: LockBit 3.0 can exclude files associated with core system functions from encryption.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1120 Peripheral Device Discovery Discovery
What they do: LockBit 3.0 has the ability to discover external storage devices.
What that means: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.
-
T1135 Network Share Discovery Discovery
What they do: LockBit 3.0 can identify network shares on compromised systems.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1614.001 System Language Discovery Discovery
What they do: LockBit 3.0 will not affect machines with language settings matching a defined exlusion list of mainly Eastern European languages.
What that means: Adversaries may attempt to gather information about the system language of a victim in order to infer the geographical location of that host.
-
T1680 Local Storage Discovery Discovery
What they do: LockBit 3.0 can enumerate local drive configuration.
What that means: Adversaries may enumerate local drives, disks, and/or volumes and their attributes like total or free space and volume serial number.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: LockBit 3.0 can use SMB for lateral movement.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1071.001 Web Protocols Command and Control
What they do: LockBit 3.0 can use HTTP to send victim host information to C2.
What that means: Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic.
-
T1132.001 Standard Encoding Command and Control
What they do: LockBit 3.0 can Base64-encode C2 communication.
What that means: Adversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect.
-
T1573.001 Symmetric Cryptography Command and Control
What they do: LockBit 3.0 can encrypt C2 communications with AES.
What that means: Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol.
-
T1486 Data Encrypted for Impact Impact
What they do: LockBit 3.0 can encrypt targeted data using the AES-256, ChaCha20, or RSA-2048 algorithms.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: LockBit 3.0 can terminate targeted processes and services related to security, backup, database management, and other applications that could stop or interfere with encryption.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: LockBit 3.0 can delete volume shadow copies.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (51)
▼Software Lockbit3 has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
Gosecretsdump
LaZagne
LostMyPassword
Mimikatz
NirSoft ExtPassword
PasswordFox
ProcDump
Veeam-Get-Creds
Defense evasion
Backstab/Process Explorer driver (BYOVD)
Defender Control
GMER
PCHunter
PowerTool
ProcessHacker
TDSSKiller
Discovery & enumeration
AdFind
Advanced IP Scanner
Advanced Port Scanner
Bloodhound
Seatbelt
SoftPerfect NetScan
Exfiltration
Anonfiles
FileZilla
FreeFileSync
File[.]io
MEGA
RClone
Sendspace
Temp[.]sh
Tempsend
Transfert-my-files
Transfer[.]sh
WinSCP
LOLBAS (living-off-the-land binaries)
BCDEdit
PsExec
Networking & tunnelling
Ligolo
Ngrok
Plink
Offensive security tooling
Cobalt Strike
Impacket
Koadic
Metasploit
PowerShell Empire
ThunderShell
Remote monitoring & management
Action1
AnyDesk
FixMeIt
ScreenConnect
Splashtop
TeamViewer
ZohoAssist
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Victims (2022)
Search, filter and paginate the victim timeline for Lockbit3. Showing 1601–1700 of 2022.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | elsan.care id5284 View details | Healthcare / Pharma | — | pending | ||
|
stolen: 821 GB.data: marketing, finance, information of all departments of one of the company's clinics, numbers, personal data of employees, contracts, reports, internal and external contracts with policyholders, subsidiaries, etc.Elsan is a m... |
||||||
| Ransomware | ibb-business-team.de id5280 View details | Germany | Services | — | pending | |
|
Financing offers in Berlin for start-ups, SMEs and real estateIBB Business Team GmbH is a 100% subsidiary of the IBB Group.On behalf of the State of Berlin and the Investment Bank of Berlin (IBB), it implements various grants for start-ups, SME... |
||||||
| Ransomware | miguelmechanical.com id5279 View details | Energy | — | pending | ||
|
Miguel Mechanical Services Limited (MMSL) has been in existence as a service provider in the Oil and Gas Industry since 1988. With over 25 years experience as an Organization, we staff well trained, experienced and certified personnel in their relati... |
||||||
| Ransomware | payroll2u.com id5278 View details | Singapore | Communication / Marketing | — | pending | |
|
Hi to all!Let us introduce another IT company that provide super-secure payroll services in Asia ;) Headquartered in Singapore.Payroll2U has such clients as AirAsia, Klook, Smith & Nephiew, Santen, Zimmer, etc.We have downloaded most impo... |
||||||
| Ransomware | flatironssolutions.com id5271 View details | Services | — | pending | ||
|
Flatirons Solutions provides a technical content management platform that transforms complex data into actionable information, driving measurably higher productivity, asset utilization, and compliance levels. We provide solutions and expertise that o... |
||||||
| Ransomware | tvk.nl id5268 View details | Netherlands | Manufacturing / Engineering | — | pending | |
|
Ton van Kuyk (TVK) is your Volvo dealer in North Holland for new Volvos, used Volvos and maintenance.Company that operates in the Automotive industry. |
||||||
| Ransomware | duomed.com id5267 View details | Healthcare / Pharma | — | pending | ||
|
The Duomed Group is a dynamic organization with a well-established reputation and is active in consultancy, sales, integration, training and technical support of medical devices and technology for hospitals and medical practices.Local expert teams... |
||||||
| Ransomware | melody.com.tr id5257 View details | Türkiye | Transportation / Travel / Logistics | — | pending | |
|
Melody Shipping AgenciesCapt. F. Yavuz ULUGÜN, General Manager Mr. Cemil ÇAĞLARKAYA, Balcan ÇAĞLARKAYA, Bora ULUGÜN Agency Manager title, We are pleased to introduce you the "Melody Shipping Agencies", the well-known shipping agency in Türkiye, off... |
||||||
| Ransomware | atcuae.ae id5256 View details | United Arab Emirates | Construction / Real Estate | — | pending | |
|
Since its inception in 1965, ATCUAE has played a leading role in the development of motorsport on both the national and international level. Today, it governs approximately 140 competitive events forming the UAE motorsport calendar, and covering disc... |
||||||
| Ransomware | politriz.ind.br id5255 View details | Brazil | Communication / Marketing | — | pending | |
|
Fundada em 1989 EM UBERLÂNDIA/MG, em modestas instalações com a força de um jovem empreendedor que acreditou e viu a oportunidade de mudar sua vida e ao mesmo tempo mudar a vida de outras pessoas desenvolvendo produtos eficientes, práticos e acessíve... |
||||||
| Ransomware | ak.com.sa id5253 View details | Saudi Arabia | Retail / E-commerce | — | pending | |
|
M.A. AL ABDUL KARIM & CO. is one of the leading retail companies in the Middle East offering the reputed brands from across the world with finest product & customer service.The business is carried forward based on highest retail standards support... |
||||||
| Ransomware | fulfilmentmatters.co.uk id5252 View details | United Kingdom | Retail / E-commerce | — | pending | |
|
Fulfilment Matters Ltd specialises in ecommerce fulfilment with a team of specialists with over 30 years of experience in fulfilment and logistics.5 gb dataencryption date December 22, 2022 |
||||||
| Ransomware | matrixschools.edu.my id5248 View details | Malaysia | Education | — | pending | |
|
Matrix Global Schools provides an outstanding education: inspiring, challenging lessons, rich and varied co-curricular programmes, a warm and caring community. |
||||||
| Ransomware | fujikura-electronics.co.th id5240 View details | Thailand | Telecommunications | — | pending | |
|
33.24 GB dataFujikura - Fujikura Ltd. - a global company producing electrical equipment for power and telecommunications systems, including devices for optical fiber, such as knives and mounting devices. In 1885, Zenpachi Fujikura began manufacturi... |
||||||
| Ransomware | nuxe.com id5235 View details | Communication / Marketing | — | pending | ||
|
NUXE, a genuine French “Love Brand”, and its founder Aliza Jabès are behind the legendary skincare products which have been essential to the day-to-day life of millions of women, such as the iconic Huile Prodigieuse®. |
||||||
| Ransomware | russellfinex.com id5234 View details | Retail / E-commerce | — | pending | ||
|
About UsEstablished in 1934, Russell Finex has enjoyed 85 steady years of successful growth to become an international group employing over 250 direct employees with annual sales exceeding £40 million ($54m).As a worldwide leader in fine mesh s... |
||||||
| Ransomware | lloyddowson.co.uk id5233 View details | United Kingdom | Services | — | pending | |
|
How Lloyd Dowson began in BridlingtonLloyd Dowson Chartered Accountants, Tax, and Business Advisors were founded over forty years ago in Bridlington. We now have over 60 staff with a board of 5 directors. Two of the directors are Lloyd Dowson’s hom... |
||||||
| Ransomware | muellergartenbau.ch id5232 View details | Switzerland | Retail / E-commerce | — | pending | |
|
The garden is a private refuge from the hustle and bustle of everyday life. It thrives as an oasis of relaxation and as a calling card for individual style. Our task is to optimally adapt the garden to local conditions and to create scope for creativ... |
||||||
| Ransomware | lidestrifoodanddrink.com id5231 View details | Agriculture / Food | — | pending | ||
|
OUR INNOVATION CENTERFor most consumer product R&D companies – whether working on a soup, sauce, salsa, or spirit – manufacturing happens on two scales: small-batch and full-scale production. That approach is limited, since what works in a test kit... |
||||||
| Ransomware | versteden.com id5230 View details | Manufacturing / Engineering | — | pending | ||
|
Versteden is specialized in the fabrication of fiberglass piping systems (Polyester, Vinyl Ester or Epoxy) either with or without a thermoplastic liner (PE, PP, PVC-U, PVC-C, PVDF or ECTFE). Its broad range of products makes it easy to choose the rig... |
||||||
| Ransomware | circlevillecourt.com id5222 View details | Public Sector | — | pending | ||
|
Welcome to The Circleville Municipal Court website. The court serves all of Pickaway County with countywide jurisdiction.We downloaded more than 500 gigabytes of different dates. Customer data. Nanny criminals. Case information. And much more. In... |
||||||
| Ransomware | datair.com id5220 View details | Other | — | pending | ||
|
Your negotiator obviously already got the operating money to solve this situation, but since now there is a slight upward trend in BTC - apparently he wants to make a little more money on this growth. No need to play with us. You have a deadline of J... |
||||||
| Ransomware | asianrecorp.com id5213 View details | Public Sector | — | pending | ||
|
The Asian Reinsurance Corporation is an intergovernmental organization established in May 1979 under the auspices of the UN-ESCAP. Membership is open to all state members or associate members of the United Nations Economic and Social Commission for A... |
||||||
| Ransomware | millennia.pro id5212 View details | Communication / Marketing | — | pending | ||
|
ENGINEERING CONSULTING SERVICES 22.44 GB DATA |
||||||
| Ransomware | 100x100banco.com id5208 View details | Venezuela, Bolivarian Republic of | Finance / Legal / Insurance | — | pending | |
|
100%BancoCaracas, Venezuela |
||||||
| Ransomware | juarez.gob.mx id5207 View details | Mexico | Public Sector | — | pending | |
|
Gobierno Municipal. Ayuntamiento de JuárezUnidad Administrativa Benito JuárezAv. Francisco Villa 950 N., CentroC.P. 32000, Juárez, Chihuahua656 737 0000 |
||||||
| Ransomware | takamiya.co id5206 View details | Colombia | Communication / Marketing | — | pending | |
|
Takamiya provides total services from development/manufacturing, sales, rental, design/construction, management/distribution of various products including temporary equipment .Takamiya Co., LtdWe create products and services with high added value... |
||||||
| Ransomware | eds-automotive.de id5181 View details | Germany | Manufacturing / Engineering | — | pending | |
|
EDS Automotive GmbH is a dynamically growing family company that offers development services for the automotive industry as well as their suppliers and service contractors.File tree of 70% data leaked: https://www.sendspace.com/file/5ba1l8 |
||||||
| Ransomware | sickkids.ca id5180 View details | Canada | Healthcare / Pharma | — | pending | |
|
We formally apologize for the attack on sikkids.ca and give back the decryptor for free, the partner who attacked this hospital violated our rules, is blocked and is no longer in our affiliate program. http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv... |
||||||
| Ransomware | hacla.org id5178 View details | Public Sector | — | pending | ||
|
More than 15TB of files : The Housing Authority of the City of Los Angeles is a state-chartered public agency. Established in 1938, HACLA provides the largest stock of affordable housing in the city Los Angeles, California and is one of the nation's... |
||||||
| Ransomware | presco.com id5161 View details | Communication / Marketing | — | pending | ||
|
Founded in 1942, Presco is a company that manufactures safety marking products and engineered films such as barricade tapes, marking flags, marking whiskers, and roll flagging. They are based in Sherman, Texas. |
||||||
| Ransomware | portodelisboa.pt id5153 View details | Portugal | Finance / Legal / Insurance | — | pending | |
|
Apl Administrao Do Porto De Lisboa SA is a company that operates in the Transportation/Trucking/Railroad industry.After successful work with the Portuguese Port Authority. In our hands are. All financial reports, audits, budgets. Contracts, infor... |
||||||
| Ransomware | aristopharma.com id5092 View details | Healthcare / Pharma | — | pending | ||
|
1 part of:750GB, Personal folders of key employees, all infrastructure\personal data\accounting, etc.Md. Azharul Islam_6581 36gb - Senior Executive,Production at Aristopharma Ltd. Md. Rubel_10790 4gb - Executive, Production at Aristopharma Ltd... |
||||||
| Ransomware | excentiahumanservices.org id5087 View details | Services | — | pending | ||
|
Revenue 14kkExcentia Human Services is a nonprofit organization in Lancaster County that provides services for people with developmental needs and autism throughout the lifespan. These services can begin at birth with therapeutic and educati... |
||||||
| Ransomware | bavelloni.com id5086 View details | Communication / Marketing | — | pending | ||
|
Bavelloni SpA provides glass processing technology and services for the architectural, furniture and domestic appliance and solar industries.We encrypted the network of this company. We also stole about 200GB of the date. Financial information. Sal... |
||||||
| Ransomware | thedonovancompany.com id5083 View details | Services | — | pending | ||
|
A small boutique CPA firm located in Irvine California. We provide tax and accounting services to individuals and their businesses. Hands on assistance with tax planning, tax compliance and various other matters. We believe getting to know our client... |
||||||
| Ransomware | maxionwheels.com id5079 View details | Other | — | pending | ||
|
Founded in 1908 and headquartered in Novi, Michigan, MAXION Wheels wheel manufacturer for passenger cars, light trucks, buses, commercial trucks, and trailers. |
||||||
| Ransomware | teknowsource.in id4916 View details | India | NGOs / Associations | — | pending | |
|
We are an organization helping our valued customers run their commercial operations in India. |
||||||
| Ransomware | polyflor.co.nz id4907 View details | New Zealand | Communication / Marketing | — | pending | |
|
POLYFLORAt Polyflor we believe that the products we choose can help us design for a better environment, both inside and out. Our collection of vinyl flooring, which is suitable for a variety of commercial and residential applications, makes a big... |
||||||
| Ransomware | catalyst-group.co.nz id4906 View details | New Zealand | Services | — | leaked | |
|
We are a kiwi-owned, responsive and agile, multi-disciplinary design and construct firm offering a seamless end-to-end service or a tailored single service solution to suit your needs.Our business is built on strong client partnerships with local... |
||||||
| Ransomware | stmc.edu.hk id4905 View details | Education | — | pending | ||
|
Sha Tin Methodist College |
||||||
| Ransomware | Monte Cristalina S.A. id4904 View details | Other | — | pending | ||
|
Monte Cristalina SA is a holding company headquartered in Sao Paulo.A Monte Cristalina é a controladora da Igarapava Participações S.A. |
||||||
| Ransomware | jka.co.uk id4903 View details | United Kingdom | Retail / E-commerce | — | pending | |
|
Jackson Kent Associates started trading in July 1997 and since then have built up a loyal customer base through mainly recommendation. We are a small company that offers personal service and a high level of expertise. |
||||||
| Ransomware | mayflowerdentalgroup.com id4902 View details | Healthcare / Pharma | — | pending | ||
|
At Mayflower Dental Group, we provide comprehensive care to all of our patients. We strive to ensure our patients have a thorough understanding of their dental health, and treatment options available to them, to keep their smile healthy. |
||||||
| Ransomware | agriobtentions.com id4901 View details | Agriculture / Food | — | pending | ||
|
Founded in 1983, Agri Obtentions, a subsidiary of INRAE, is an independent company specialised in creating and promoting varietal innovations.Agri Obtentions' values are sustainable agriculture and innovation.Agri Obtentions - a few key figures... |
||||||
| Ransomware | womgroup.com id4900 View details | India | Communication / Marketing | — | pending | |
|
WOM India has a large staff of design engineers who take pride in innovation and continuous ongoing development of its products.The engineering staff takes an active interest not only in the design but also in the manufacturing and assembly activit... |
||||||
| Ransomware | rgvfirm.com id4899 View details | Finance / Legal / Insurance | — | pending | ||
|
Griffith Law Group is committed to the optimal resolution of all disputes in the most profitable, efficient and cost-effective way. When you contact our firm, we will work to develop a winning strategy tailored to your unique circumstances. This may... |
||||||
| Ransomware | businesscentral.org.nz id4898 View details | New Zealand | Services | — | pending | |
|
We’re an organisation focused exclusively on businesses. Whether you’re looking for comprehensive employment advice and support, learning and development to help your business and people grow, help to find skilled staff, business mentors, succession... |
||||||
| Ransomware | mercuryit.co.nz id4897 View details | New Zealand | Communication / Marketing | — | pending | |
|
IT is a company that provides services in its field to many companies in New Zealand and Australia. Unfortunately, this company could not protect itself and its customers. As a result of our attack, more than 500 TB of customer data was encrypted... |
||||||
| Ransomware | senateshj.com id4896 View details | Communication / Marketing | — | pending | ||
|
SenateSHJ helps include government, healthcare, journalism, media, marketing, business consulting, digital and social strategy management,as well as communication consulting. They help organizations solve their reputation, change, and engagement pr... |
||||||
| Ransomware | accuro.co.nz id4895 View details | New Zealand | Communication / Marketing | — | pending | |
|
Accuro is a New Zealand-owned, not for profit insurer. We put our 30,000 members before financial gain. When you combine our quality products with fast claims turnaround and our knowledgeable customer service team, it’s no wonder we are New Zeala... |
||||||
| Ransomware | mcft.com id4846 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | veolus.com id4833 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | tdtu.edu.vn id4832 View details | Viet Nam | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | sentecgroup.com id4831 View details | Services | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | rkfoodland.com id4830 View details | India | Agriculture / Food | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | luxeprint.com.tw id4829 View details | Taiwan, Province of China | Communication / Marketing | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | k-toko.com id4828 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | jieh.vn id4827 View details | Viet Nam | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | financierareyes.com.mx id4826 View details | Mexico | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | dof.ca.gov id4825 View details | United States | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | amazing-global.com id4824 View details | Venezuela, Bolivarian Republic of | Services | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | koda.com.tw id4781 View details | Taiwan, Province of China | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | biotipo.com.br id4780 View details | Brazil | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | oltax.com id4779 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | rhotelja.com id4777 View details | Hospitality / Food & Beverage / Tourism | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | hawanasalalah.com id4776 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | g4s.com id4747 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | amundson.co.nz id4746 View details | New Zealand | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | myersontooth.com id4745 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | prinovaglobal.com id4732 View details | Communication / Marketing | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | littleswitzerland.com id4731 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | sentenia.net id4716 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | handrhealthcare.com id4715 View details | Healthcare / Pharma | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | brunoy.fr id4714 View details | France | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | abilways.com id4713 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | thorntontomasetti.com id4709 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | st-group.com id4708 View details | Services | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | smithsinterconnect.com id4707 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | menziesaviation.com id4706 View details | Transportation / Travel / Logistics | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | hildinganders.com id4705 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | ckfinc.com id4704 View details | Services | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | adamjeeinsurance.com id20030 View details | Pakistan | Finance / Legal / Insurance | pending | ||
|
Adamjee Insurance is one of the leading general insurance companies in Pakistan, offering Motor Insurance, Health Insurance, and Travel Insurance and offers customised solutions to meet the protection needs of individual and corporate customers. |
||||||
| Ransomware | 8x8.com id4702 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | colonialgeneral.com id4688 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | bankseta.org.za id4679 View details | South Africa | Finance / Legal / Insurance | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | ssp-worldwide.com id4642 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | ryokikogyo.co.jp id4641 View details | Japan | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | westmount.org id4623 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | norseman.ca id4620 View details | Canada | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | zagiel.pl id4607 View details | Poland | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | linkplus.com.hk id4606 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | itis-technology.com id4605 View details | IT | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | gulfcoastwindows.com id4604 View details | Energy | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | amend.com.br id4603 View details | Brazil | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | scottindustrialsystems.com id4579 View details | Manufacturing / Engineering | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | amarillogeeks.webhop.org id4563 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | thecondorgroup.com id4558 View details | Qatar | Services | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | chahousing.org id4557 View details | Construction / Real Estate | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | adnec.ae id4556 View details | United Arab Emirates | Other | — | pending | |
|
No additional victim description available. |
||||||