Ransomware Group intelligence

Lockbit5

Active

Track Lockbit5 with 329 published victims and 22 known leak locations in a single intelligence view.

Victims 329 Known published victims in this dataset
First discovered 2025-12-07 Earliest victim discovery date
Last discovered 2026-07-11 Latest victim discovery date
Inactive since 7 days Days since the latest known victim
Top country United States 58 victims
Known locations 22 Leak or negotiation infrastructure tracked

Overview

Lockbit5 is tracked by Breach House as a ransomware group with 329 published victims.

United States is currently the most targeted country in this dataset.

22 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (22)

    Label Type Availability Links
    Leak location 1 Onion service Unknown lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion
    Leak location 2 Onion service Unknown lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion
    Leak location 3 Onion service Unknown lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
    Leak location 4 Onion service Unknown lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion
    Leak location 5 Onion service Unknown lockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onion
    Leak location 6 Onion service Unknown lockbitabmbzz652qeqd7yztgugcihpy4s4f6zuqi3jx32rzjylsn7ad.onion
    Leak location 7 Onion service Unknown lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
    Leak location 8 Onion service Unknown lockbitdx4kanolaotenc3nmonlxv5enmhxdh2lk54rirvcdsljfbjyd.onion
    Leak location 9 Onion service Unknown lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
    Leak location 10 Onion service Unknown lockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion
    Leak location 11 Onion service Unknown lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
    Leak location 12 Onion service Unknown lockbitgf43c7avhx5wesx5ambjgbormhwc2tujsy6lvg6drkjhnjryd.onion
    Leak location 13 Onion service Unknown lockbithn5a2qgf4ojvut3q25yylrauvjxrz6sjdd4teas65osru2lqd.onion
    Leak location 14 Onion service Unknown lockbitjqfuyrkxiie6bcly6ow4sh6lmyuyvyats5hcpe5e6hbuhikyd.onion
    Leak location 15 Onion service Unknown lockbitkybiqhyv64vdaamz7uf2ymjoafyalx3e6spmmsz5xyk5nbcad.onion
    Leak location 16 Onion service Unknown lockbitnpobu6luzzlxb7br5uyqnmeruwimpjuw2kv442nvxd6sufsad.onion
    Leak location 17 Onion service Unknown lockbitotfzuq2lpyydzgbhelps2mcz62cpix4nzpcyaak5444iwfmqd.onion
    Leak location 18 Onion service Unknown lockbitqth2ij5cdqmj4cdchoh3etnlbh74utqviwqb5svvhxygnmoqd.onion
    Leak location 19 Onion service Unknown lockbity3v2rhjjjt6opcgvdrrlvdbrt3p2wqmxmq4cm36cchphdy6qd.onion
    Leak location 20 Onion service Unknown lockbity44loulvujiaoels7knti2tfsnglclnse22syaa6x3vpqp7yd.onion
    Leak location 21 Onion service Unknown lockbitynxdcxtuvma5deq5pxtnqoacftuigkk37xjq3whefozdpcuad.onion
    Leak location 22 Onion service Unknown lockbityq64mwtobqqcr3iwxs5q4o7iliuv72gbx4vflggj4m4wqekad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (329)

    Search, filter and paginate the victim timeline for Lockbit5. Showing 1–100 of 329.

    Type Target Discovered Country Business Category Intel Link
    Ransomware bancrofteng.com id30466 View details United Kingdom Manufacturing / Engineering
    Ransomware bancrofteng.com id30466 View details United Kingdom Manufacturing / Engineering
    Ransomware magna.com.do id30467 View details Dominican Republic Transportation / Travel / Logistics
    Ransomware magna.com.do id30467 View details Dominican Republic Transportation / Travel / Logistics
    Ransomware giesdl.de id30468 View details Germany IT
    Ransomware giesdl.de id30468 View details Germany IT
    Ransomware jshotels.com id30469 View details Jordan Hospitality / Food & Beverage / Tourism
    Ransomware jshotels.com id30469 View details Jordan Hospitality / Food & Beverage / Tourism
    Ransomware hotel-bourse.com id30470 View details France Hospitality / Food & Beverage / Tourism
    Ransomware hotel-bourse.com id30470 View details France Hospitality / Food & Beverage / Tourism
    Ransomware abianchini.es id30471 View details Spain Retail / E-commerce
    Ransomware abianchini.es id30471 View details Spain Retail / E-commerce
    Ransomware comtri.de id30472 View details Germany IT
    Ransomware comtri.de id30472 View details Germany IT
    Ransomware mediaservicemaastricht.nl id30473 View details Netherlands IT
    Ransomware mediaservicemaastricht.nl id30473 View details Netherlands IT
    Ransomware ravagnan.com id30474 View details Italy Manufacturing / Engineering
    Ransomware ravagnan.com id30474 View details Italy Manufacturing / Engineering
    Ransomware probat.ag id30009 View details Germany Manufacturing / Engineering
    Ransomware eternal.hk id30010 View details Hong Kong Finance / Legal / Insurance
    Ransomware 5deagosto.com.br id30011 View details Brazil Retail / E-commerce
    Ransomware abandw.com id30012 View details ND IT
    Ransomware ag-360.ca id30013 View details Canada Agriculture / Food
    Ransomware elematic.com id30014 View details Finland Manufacturing / Engineering
    Ransomware amc.co.th id30015 View details Thailand Finance / Legal / Insurance
    Ransomware casaandina.com.co id30016 View details Colombia Hospitality / Food & Beverage / Tourism
    Ransomware bvi.co.bw id30017 View details Botswana Transportation / Travel / Logistics
    Ransomware comta.com.tw id30018 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware daikyonishikawa.co.jp id30019 View details Japan Manufacturing / Engineering
    Ransomware rubbercompounding.com id30020 View details Manufacturing / Engineering
    Ransomware drwu.com id30021 View details China Healthcare / Medicine
    Ransomware felizhotelboracay.com id30022 View details Philippines Hospitality / Food & Beverage / Tourism
    Ransomware greyhighschool.com id30023 View details United States Education
    Ransomware idefeey.yucatan.gob.mx id30024 View details Mexico Public Sector
    Ransomware inspeqingenieria.com id30025 View details Mexico Manufacturing / Engineering
    Ransomware majorcineplex.com id30026 View details Thailand Hospitality / Food & Beverage / Tourism
    Ransomware parkviewtaipei.com id30027 View details Taiwan, Province of China Hospitality / Food & Beverage / Tourism
    Ransomware ponce-benzo.com id30028 View details Puerto Rico Retail / E-commerce
    Ransomware parampackaging.com id30029 View details Türkiye Manufacturing / Engineering
    Ransomware primelinkbio.com id30030 View details United States Healthcare / Pharma
    Ransomware saico.co.th id30031 View details Thailand Manufacturing / Engineering
    Ransomware sanatoriodelta.com id30032 View details Colombia Healthcare / Medicine
    Ransomware saude.mt.gov.br id30033 View details Brazil Public Sector
    Ransomware sparkinter.com id30034 View details IT
    Ransomware sra.nl id30035 View details Netherlands IT
    Ransomware teleton.org.hn id30036 View details Honduras NGOs / Associations
    Ransomware union-chemical.co.th id30037 View details Thailand
    Ransomware venelectronics.com id30038 View details Venezuela, Bolivarian Republic of
    Ransomware weinwurm.cc id30039 View details Austria
    Ransomware nundungopee.mu id30040 View details Mauritius
    Ransomware utb.edu.vn id30041 View details Viet Nam
    Ransomware centralromana.com.do id29755 View details Dominican Republic Agriculture / Food
    Ransomware shougang.com.pe id29756 View details Peru Manufacturing / Engineering
    Ransomware stahlwille.nl id29757 View details Netherlands Manufacturing / Engineering
    Ransomware lbreng.com.br id29758 View details Brazil Construction / Real Estate
    Ransomware santoinacio-rio.com.br id29759 View details Brazil Hospitality / Food & Beverage / Tourism
    Ransomware jec.co.id id29760 View details Indonesia Construction / Real Estate
    Ransomware shottermill-jun.surrey.sch.uk id29761 View details United Kingdom Education
    Ransomware columbiaorthogroup.com id29762 View details United States Healthcare / Medicine
    Ransomware vth.nl id29763 View details Netherlands Education
    Ransomware implosa.com id29764 View details Mexico Other
    Ransomware groupe-mbm.com id29765 View details France Construction / Real Estate
    Ransomware scbgroup.com.sg id29766 View details Singapore Finance / Legal / Insurance
    Ransomware sumerfaktoring.com id29767 View details Russian Federation Finance / Legal / Insurance
    Ransomware hgs-wt.at id29768 View details Austria Construction / Real Estate
    Ransomware grupodetoni.com.br id29769 View details Brazil Construction / Real Estate
    Ransomware hollandbulbfarms.com id29770 View details United States Agriculture / Food
    Ransomware dobarro.com.uy id29771 View details Uruguay Retail / E-commerce
    Ransomware helios.com.bo id29772 View details Bolivia, Plurinational State of Manufacturing / Engineering
    Ransomware wessels.group id29773 View details Germany Manufacturing / Engineering
    Ransomware sierravistahospital.com id29774 View details United States Healthcare / Medicine
    Ransomware patta.com id29775 View details Netherlands Retail / E-commerce
    Ransomware probat.com id29776 View details Germany Manufacturing / Engineering
    Ransomware delano.k12.mn.us id29777 View details United States Education
    Ransomware elumax.com id29778 View details Germany Manufacturing / Engineering
    Ransomware uni-china.com id29779 View details China Education
    Ransomware sweetome.com id29780 View details Brazil Retail / E-commerce
    Ransomware dentoncalvary.org id29114 View details United States Education
    Ransomware vp-brands.com id28994 View details Bulgaria Hospitality / Food & Beverage / Tourism
    Ransomware rjrgleanergroup.com id28936 View details United States Communication / Marketing
    Ransomware de.yangming.com id28937 View details Germany Transportation / Travel / Logistics
    Ransomware anser-coding.com id28938 View details Germany Manufacturing / Engineering
    Ransomware rhactushotel.com id28939 View details Egypt Hospitality / Food & Beverage / Tourism
    Ransomware orekait.com id28373 View details Japan IT
    Ransomware gursoygrup.com.tr id28374 View details Türkiye Construction / Real Estate
    Ransomware irestal.com id28375 View details Spain Manufacturing / Engineering
    Ransomware ritta.co.th id28376 View details Thailand Construction / Real Estate
    Ransomware defcon5italy.com id28481 View details Italy Manufacturing / Engineering
    Ransomware planetsport.ma id28482 View details Morocco Retail / E-commerce
    Ransomware pricon.com.ph id28483 View details Philippines Manufacturing / Engineering
    Ransomware instapack.es id28484 View details Spain Transportation / Travel / Logistics
    Ransomware stllc.org id28485 View details United States Services
    Ransomware studiopiu.net id28617 View details Italy Communication / Marketing
    Ransomware murni.co.id id28618 View details Indonesia IT
    Ransomware bardehle.com id28619 View details Germany Finance / Legal / Insurance
    Ransomware erstransportes.com.br id28620 View details Brazil Transportation / Travel / Logistics
    Ransomware bladex.com id28621 View details Panama Finance / Legal / Insurance
    Ransomware heinrichs-logistic.de id28622 View details Germany Transportation / Travel / Logistics
    Ransomware merlo.de id28623 View details Germany Manufacturing / Engineering
    Ransomware fastindustria.com.br id28178 View details Brazil Manufacturing / Engineering