Ransomware Group intelligence

Lockbit3

Inactive

Track Lockbit3 with 2022 published victims and 42 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 2022 Known published victims in this dataset
First discovered 2022-06-29 Earliest victim discovery date
Last discovered 2025-12-05 Latest victim discovery date
Inactive since 289 days Days since the latest known victim
Top country United States 311 victims
Known locations 42 Leak or negotiation infrastructure tracked

Overview

Lockbit3 is tracked by Breach House as a ransomware group with 2022 published victims.

United States is currently the most targeted country in this dataset.

42 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 93 4.6%
  • Pending 1927 95.4%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (42)

    Label Type Availability Links
    Leak location 27 Onion service Up checked 6h ago lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 29 Onion service Up checked 6h ago lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 39 Onion service Up checked 6h ago lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 42 Onion service Down checked 6h ago lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion
    Leak location 40 Onion service Down checked 6h ago lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion
    Leak location 41 Onion service Down checked 6h ago lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43foocwmrzsokumqid.onion
    Leak location 37 Onion service Down checked 6h ago lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion
    Leak location 38 Onion service Down checked 6h ago lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion
    Leak location 36 Onion service Down checked 6h ago lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion
    Leak location 35 Onion service Down checked 6h ago lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion
    Leak location 34 Onion service Down checked 6h ago lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion
    Leak location 33 Onion service Down checked 6h ago lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion
    Leak location 32 Onion service Down checked 6h ago lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion
    Leak location 30 Onion service Down checked 6h ago lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion
    Leak location 31 Onion service Down checked 6h ago lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion
    Leak location 25 Onion service Down checked 6h ago lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion
    Leak location 28 Onion service Down checked 6h ago ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion
    Leak location 26 Onion service Down checked 6h ago lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion
    Leak location 24 Onion service Down checked 6h ago lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion
    Leak location 21 Onion service Down checked 6h ago lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion
    Leak location 22 Onion service Down checked 6h ago lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion
    Leak location 23 Onion service Down checked 6h ago lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion
    Leak location 19 Onion service Down checked 6h ago lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion
    Leak location 20 Onion service Down checked 6h ago lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion
    Leak location 18 Onion service Down checked 6h ago lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion
    Leak location 15 Onion service Down checked 6h ago lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion
    Leak location 17 Onion service Down checked 6h ago lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion
    Leak location 16 Onion service Down checked 6h ago lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion
    Leak location 14 Onion service Down checked 6h ago lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion
    Leak location 13 Onion service Down checked 6h ago lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion
    Leak location 11 Onion service Down checked 6h ago lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion
    Leak location 12 Onion service Down checked 6h ago lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion
    Leak location 9 Onion service Down checked 6h ago lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion
    Leak location 7 Onion service Down checked 6h ago lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion
    Leak location 8 Onion service Down checked 6h ago lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion
    Leak location 5 Onion service Down checked 6h ago lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion
    Leak location 6 Onion service Down checked 6h ago lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion
    Leak location 10 Onion service Down checked 6h ago lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion
    Leak location 4 Onion service Down checked 6h ago lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion
    Leak location 2 Onion service Down checked 6h ago lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
    Leak location 3 Onion service Down checked 6h ago lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion
    Leak location 1 Onion service Down checked 6h ago lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion

    Top Activity Sectors (17)

    Victims (2022)

    Search, filter and paginate the victim timeline for Lockbit3. Showing 701–800 of 2022.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware adyne.com id9589 View details Finance / Legal / Insurance pending
    Ransomware goodhopeholdings.com id9588 View details Malaysia Energy pending
    Ransomware planethomelending.com id9587 View details Communication / Marketing pending
    Ransomware kwhfreeze.fi id9562 View details Finland Other pending
    Ransomware tarltonandson.com id9531 View details Manufacturing / Engineering pending
    Ransomware muellersystems.com id9513 View details United States Communication / Marketing pending
    Ransomware msim.de id9512 View details Germany Communication / Marketing pending
    Ransomware aegean.gr id9509 View details Greece Education pending
    Ransomware thewalkerschool.org id9508 View details Education pending
    Ransomware modafabrics.com id9507 View details Manufacturing / Engineering pending
    Ransomware wombleco.com id9506 View details Finance / Legal / Insurance pending
    Ransomware cityofclarksville.com id9505 View details United States Public Sector pending
    Ransomware digitaldruck-esser.de id9504 View details Germany IT pending
    Ransomware hotelemc2.com id9503 View details Hospitality / Food & Beverage / Tourism pending
    Ransomware carsonteam.com id9502 View details United States Transportation / Travel / Logistics pending
    Ransomware plati.it id9501 View details Italy Healthcare / Pharma pending
    Ransomware hotel-ampere-paris.com id9500 View details Hospitality / Food & Beverage / Tourism pending
    Ransomware roth-werkzeugbau.de id9498 View details Germany IT pending
    Ransomware heinrichseegers.de id9497 View details Germany Communication / Marketing pending
    Ransomware aten.com id9496 View details Taiwan, Province of China Communication / Marketing pending
    Ransomware quifatex.com id9495 View details Ecuador Healthcare / Pharma pending
    Ransomware vital.co.za id9494 View details South Africa Healthcare / Pharma pending
    Ransomware creatz3d.sg id9493 View details Singapore Communication / Marketing pending
    Ransomware loiret.fr id9492 View details France Public Sector pending
    Ransomware estes-express.com id9489 View details Mexico Communication / Marketing pending
    Ransomware floortex.com id9485 View details Communication / Marketing pending
    Ransomware planning.org id9484 View details United States Communication / Marketing pending
    Ransomware morningstarco.com id9478 View details Communication / Marketing pending
    Ransomware aei.cc id9475 View details United States Manufacturing / Engineering pending
    Ransomware gotocfr.com id9467 View details Agriculture / Food pending
    Ransomware ggarabia.com id9460 View details Saudi Arabia Healthcare / Pharma pending
    Ransomware fawry.com id9449 View details Finance / Legal / Insurance pending
    Ransomware amberhillgroup.com id9448 View details Services pending
    Ransomware foley.k12.mn.us id9443 View details Education pending
    Ransomware gitiusa.com id9440 View details United States NGOs / Associations pending
    Ransomware allenovery.com id9439 View details Finance / Legal / Insurance pending
    Ransomware ccdrc.pt id9419 View details Portugal Finance / Legal / Insurance pending
    Ransomware good-lawyer.com id9414 View details Finance / Legal / Insurance pending
    Ransomware kbrlaw.com id9412 View details Finance / Legal / Insurance pending
    Ransomware eyephy.com id9411 View details Healthcare / Pharma pending
    Ransomware concretevalue.com id9409 View details Construction / Real Estate pending
    Ransomware howlandlaw.net id9408 View details Finance / Legal / Insurance pending
    Ransomware nckb.com id9390 View details Other pending
    Ransomware egco.com id9389 View details Public Sector pending
    Ransomware benya.capital id9388 View details Communication / Marketing pending
    Ransomware global-value-web.com id9387 View details Services pending
    Ransomware aseankorea.org id9386 View details Other pending
    Ransomware brlogistics.net id9385 View details Transportation / Travel / Logistics pending
    Ransomware bresselouhannaiseintercom.fr id9384 View details France Other pending
    Ransomware nfcc.gov.my id9383 View details Malaysia Other pending
    Ransomware sansasecurity.com id9382 View details Israel Other pending
    Ransomware emiliacentrale.it id9381 View details Italy Other pending
    Ransomware letillet.btprms.com id9380 View details Communication / Marketing pending
    Ransomware ospedalecoq.it id9379 View details Italy Other pending
    Ransomware springeroil.com id9378 View details Energy pending
    Ransomware szutest.cz id9377 View details Czechia Other pending
    Ransomware mat-antriebstechnik.de id9376 View details Germany IT pending
    Ransomware studio483.com id9375 View details Communication / Marketing pending
    Ransomware infosysbpm.com id9374 View details India IT pending
    Ransomware tks.co.th id9373 View details Thailand Services pending
    Ransomware translink.se id9370 View details Sweden Finance / Legal / Insurance pending
    Ransomware tasl.co.th id9369 View details Thailand Transportation / Travel / Logistics pending
    Ransomware abhmfg.com id9368 View details Other pending
    Ransomware portlandtractor.com id9366 View details Communication / Marketing pending
    Ransomware unimed.coop.br id9365 View details Brazil Healthcare / Pharma pending
    Ransomware jewell.edu id9364 View details United States Education pending
    Ransomware microtrain.net id9363 View details Education pending
    Ransomware bindagroup.com id9352 View details Communication / Marketing pending
    Ransomware lafase.cl id9351 View details France Education pending
    Ransomware shimano.com id9350 View details Finance / Legal / Insurance pending
    Ransomware psmicorp.com id9348 View details Services pending
    Ransomware degregoris.com id9339 View details Retail / E-commerce pending
    Ransomware vitaresearch.com id9337 View details Services pending
    Ransomware sanmiguel.iph id9336 View details Philippines Communication / Marketing pending
    Ransomware steelofcarolina.com id9335 View details Manufacturing / Engineering pending
    Ransomware raumberg-gumpenstein.at id9334 View details Austria Agriculture / Food pending
    Ransomware kitprofs.com id9333 View details Communication / Marketing pending
    Ransomware imprex.es id9332 View details Spain Communication / Marketing pending
    Ransomware summithealth.com id9328 View details Healthcare / Pharma pending
    Ransomware riohondo.edu id9300 View details United States Education pending
    Ransomware utec.com.sa id9299 View details Saudi Arabia Communication / Marketing pending
    Ransomware bildco.ae id9298 View details United Arab Emirates Construction / Real Estate leaked
    Ransomware ageroute.sn id9297 View details Senegal Construction / Real Estate pending
    Ransomware smartuigroup.com.au id9293 View details Australia Communication / Marketing pending
    Ransomware ecabusinessenergy.com id9274 View details Services pending
    Ransomware frontlineequipment.com.au id9273 View details Australia Other pending
    Ransomware groupemontclair.com id9272 View details QC Communication / Marketing pending
    Ransomware groupemontclair.com id9272 View details Canada Communication / Marketing pending
    Ransomware aces-int.com id9271 View details IT pending
    Ransomware aiq.com.mx id9270 View details Mexico Services pending
    Ransomware topcharoen.co.th id9266 View details Thailand Communication / Marketing pending
    Ransomware mottamaholdings.com id9265 View details Myanmar Construction / Real Estate pending
    Ransomware boeing.com id9246 View details Services pending
    Ransomware tilden-coil.com id9243 View details Energy pending
    Ransomware caminorealcs.org id9234 View details Services pending
    Ransomware doverchem.com id9233 View details Manufacturing / Engineering pending
    Ransomware camico.com id9216 View details Communication / Marketing pending
    Ransomware excon.cl id9215 View details Chile Communication / Marketing pending
    Ransomware martinsonservices.com id9214 View details Services pending
    Ransomware fern-plastics.co.uk id9211 View details United Kingdom Manufacturing / Engineering pending