Ransomware Group intelligence

Lockbit5

Active

Track Lockbit5 with 384 published victims and 23 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 384 Known published victims in this dataset
First discovered 2025-12-07 Earliest victim discovery date
Last discovered 2026-08-31 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 69 victims
Known locations 23 Leak or negotiation infrastructure tracked

Overview

Lockbit5 is tracked by Breach House as a ransomware group with 384 published victims.

United States is currently the most targeted country in this dataset.

23 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (23)

    Label Type Availability Links
    Leak location 21 Onion service Up checked 4h ago lockbitynxdcxtuvma5deq5pxtnqoacftuigkk37xjq3whefozdpcuad.onion
    Leak location 20 Onion service Up checked 4h ago lockbity44loulvujiaoels7knti2tfsnglclnse22syaa6x3vpqp7yd.onion
    Leak location 22 Onion service Up checked 4h ago lockbityq64mwtobqqcr3iwxs5q4o7iliuv72gbx4vflggj4m4wqekad.onion
    Leak location 23 Onion service Up checked 4h ago lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion
    Leak location 19 Onion service Up checked 4h ago lockbity3v2rhjjjt6opcgvdrrlvdbrt3p2wqmxmq4cm36cchphdy6qd.onion
    Leak location 18 Onion service Up checked 4h ago lockbitqth2ij5cdqmj4cdchoh3etnlbh74utqviwqb5svvhxygnmoqd.onion
    Leak location 17 Onion service Up checked 4h ago lockbitotfzuq2lpyydzgbhelps2mcz62cpix4nzpcyaak5444iwfmqd.onion
    Leak location 16 Onion service Up checked 4h ago lockbitnpobu6luzzlxb7br5uyqnmeruwimpjuw2kv442nvxd6sufsad.onion
    Leak location 15 Onion service Up checked 4h ago lockbitkybiqhyv64vdaamz7uf2ymjoafyalx3e6spmmsz5xyk5nbcad.onion
    Leak location 6 Onion service Up checked 4h ago lockbitabmbzz652qeqd7yztgugcihpy4s4f6zuqi3jx32rzjylsn7ad.onion
    Leak location 14 Onion service Up checked 4h ago lockbitjqfuyrkxiie6bcly6ow4sh6lmyuyvyats5hcpe5e6hbuhikyd.onion
    Leak location 13 Onion service Up checked 4h ago lockbithn5a2qgf4ojvut3q25yylrauvjxrz6sjdd4teas65osru2lqd.onion
    Leak location 9 Onion service Up checked 4h ago lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
    Leak location 10 Onion service Up checked 4h ago lockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion
    Leak location 7 Onion service Up checked 4h ago lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
    Leak location 8 Onion service Up checked 4h ago lockbitdx4kanolaotenc3nmonlxv5enmhxdh2lk54rirvcdsljfbjyd.onion
    Leak location 5 Onion service Up checked 4h ago lockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onion
    Leak location 3 Onion service Up checked 4h ago lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
    Leak location 1 Onion service Up checked 4h ago lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion
    Leak location 2 Onion service Up checked 4h ago lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion
    Leak location 12 Onion service Down checked 4h ago lockbitgf43c7avhx5wesx5ambjgbormhwc2tujsy6lvg6drkjhnjryd.onion
    Leak location 11 Onion service Down checked 4h ago lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
    Leak location 4 Onion service Down checked 4h ago lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion

    Top Activity Sectors (17)

    Victims (384)

    Search, filter and paginate the victim timeline for Lockbit5. Showing 101–200 of 384.

    Type Target Discovered Country Business Category Intel Link
    Ransomware teleton.org.hn id30036 View details Honduras NGOs / Associations
    Ransomware union-chemical.co.th id30037 View details Thailand
    Ransomware venelectronics.com id30038 View details Venezuela, Bolivarian Republic of
    Ransomware weinwurm.cc id30039 View details Austria
    Ransomware nundungopee.mu id30040 View details Mauritius
    Ransomware utb.edu.vn id30041 View details Viet Nam
    Ransomware centralromana.com.do id29755 View details Dominican Republic Agriculture / Food
    Ransomware shougang.com.pe id29756 View details Peru Manufacturing / Engineering
    Ransomware stahlwille.nl id29757 View details Netherlands Manufacturing / Engineering
    Ransomware lbreng.com.br id29758 View details Brazil Construction / Real Estate
    Ransomware santoinacio-rio.com.br id29759 View details Brazil Hospitality / Food & Beverage / Tourism
    Ransomware jec.co.id id29760 View details Indonesia Construction / Real Estate
    Ransomware shottermill-jun.surrey.sch.uk id29761 View details United Kingdom Education
    Ransomware columbiaorthogroup.com id29762 View details United States Healthcare / Pharma
    Ransomware vth.nl id29763 View details Netherlands Education
    Ransomware implosa.com id29764 View details Mexico Other
    Ransomware groupe-mbm.com id29765 View details France Construction / Real Estate
    Ransomware scbgroup.com.sg id29766 View details Singapore Finance / Legal / Insurance
    Ransomware sumerfaktoring.com id29767 View details Russian Federation Finance / Legal / Insurance
    Ransomware hgs-wt.at id29768 View details Austria Construction / Real Estate
    Ransomware grupodetoni.com.br id29769 View details Brazil Construction / Real Estate
    Ransomware hollandbulbfarms.com id29770 View details United States Agriculture / Food
    Ransomware dobarro.com.uy id29771 View details Uruguay Retail / E-commerce
    Ransomware helios.com.bo id29772 View details Bolivia, Plurinational State of Manufacturing / Engineering
    Ransomware wessels.group id29773 View details Germany Manufacturing / Engineering
    Ransomware sierravistahospital.com id29774 View details United States Healthcare / Pharma
    Ransomware patta.com id29775 View details Netherlands Retail / E-commerce
    Ransomware probat.com id29776 View details Germany Manufacturing / Engineering
    Ransomware delano.k12.mn.us id29777 View details United States Education
    Ransomware elumax.com id29778 View details Germany Manufacturing / Engineering
    Ransomware uni-china.com id29779 View details China Education
    Ransomware sweetome.com id29780 View details Brazil Retail / E-commerce
    Ransomware dentoncalvary.org id29114 View details United States Education
    Ransomware vp-brands.com id28994 View details Bulgaria Hospitality / Food & Beverage / Tourism
    Ransomware rjrgleanergroup.com id28936 View details United States Communication / Marketing
    Ransomware de.yangming.com id28937 View details Germany Transportation / Travel / Logistics
    Ransomware anser-coding.com id28938 View details Germany Manufacturing / Engineering
    Ransomware rhactushotel.com id28939 View details Egypt Hospitality / Food & Beverage / Tourism
    Ransomware orekait.com id28373 View details Japan IT
    Ransomware gursoygrup.com.tr id28374 View details Türkiye Construction / Real Estate
    Ransomware irestal.com id28375 View details Spain Manufacturing / Engineering
    Ransomware ritta.co.th id28376 View details Thailand Construction / Real Estate
    Ransomware defcon5italy.com id28481 View details Italy Manufacturing / Engineering
    Ransomware planetsport.ma id28482 View details Morocco Retail / E-commerce
    Ransomware pricon.com.ph id28483 View details Philippines Manufacturing / Engineering
    Ransomware instapack.es id28484 View details Spain Transportation / Travel / Logistics
    Ransomware stllc.org id28485 View details United States Services
    Ransomware studiopiu.net id28617 View details Italy Communication / Marketing
    Ransomware murni.co.id id28618 View details Indonesia IT
    Ransomware bardehle.com id28619 View details Germany Finance / Legal / Insurance
    Ransomware erstransportes.com.br id28620 View details Brazil Transportation / Travel / Logistics
    Ransomware bladex.com id28621 View details Panama Finance / Legal / Insurance
    Ransomware heinrichs-logistic.de id28622 View details Germany Transportation / Travel / Logistics
    Ransomware merlo.de id28623 View details Germany Manufacturing / Engineering
    Ransomware fastindustria.com.br id28178 View details Brazil Manufacturing / Engineering
    Ransomware sportvision.ba id28177 View details Bosnia and Herzegovina Retail / E-commerce
    Ransomware townoforangeva.gov id28176 View details United States Public Sector
    Ransomware gas.mercedes-benz.com.eg id28175 View details Egypt Transportation / Travel / Logistics
    Ransomware abuhatim.com id28174 View details Oman Construction / Real Estate
    Ransomware milanocavi.com id28173 View details Italy Manufacturing / Engineering
    Ransomware zsfh.cz id28172 View details Czechia Education
    Ransomware contrar.it id28171 View details Italy Transportation / Travel / Logistics
    Ransomware awvgrazerfeld.at id28170 View details Austria Public Sector
    Ransomware douglasstruckbodies.com id28169 View details United States Manufacturing / Engineering
    Ransomware mesto-jemnice.cz id28168 View details Czechia Public Sector
    Ransomware meyzietp.com id28167 View details France Construction / Real Estate
    Ransomware pegasussrl.com id28166 View details Italy Manufacturing / Engineering
    Ransomware villa-romane.fr id28165 View details France Hospitality / Food & Beverage / Tourism
    Ransomware vitropor.pt id28164 View details Portugal Manufacturing / Engineering
    Ransomware vitexpharma.com id28163 View details Australia Healthcare / Pharma
    Ransomware seleniaravenna.it id28162 View details Italy Transportation / Travel / Logistics
    Ransomware aplast.ro id28161 View details Romania Manufacturing / Engineering
    Ransomware shunhinggroup.com id28160 View details Hong Kong Retail / E-commerce
    Ransomware earthprotect.co.jp id28159 View details Japan Energy
    Ransomware wibeats.it id28158 View details Italy IT
    Ransomware comunidadandina.org id28157 View details Peru Public Sector
    Ransomware fondonorma.org.ve id28156 View details Venezuela, Bolivarian Republic of NGOs / Associations
    Ransomware cegasa.com id28155 View details Spain Energy
    Ransomware nucleodediagnostico.mx id28154 View details Mexico Healthcare / Pharma
    Ransomware marti.do id28153 View details Dominican Republic Energy
    Ransomware decaturdiagnosticlab.net id28152 View details United States Healthcare / Pharma
    Ransomware giunti.it id27707 View details Italy Education
    Ransomware emp.id id27706 View details Indonesia IT
    Ransomware atrium.com id27705 View details United States IT
    Ransomware formula50.it id27704 View details Italy Communication / Marketing
    Ransomware paolidental.org id27703 View details Italy Healthcare / Pharma
    Ransomware cti-bat.fr id27702 View details France Construction / Real Estate
    Ransomware praxis-oberhof.ch id27701 View details Switzerland Healthcare / Pharma
    Ransomware thaihua.com id27700 View details Thailand Agriculture / Food
    Ransomware landsteiner.net id27699 View details Mexico Healthcare / Pharma
    Ransomware barberopietro.it id27698 View details Italy Manufacturing / Engineering
    Ransomware hb-technik.at id27697 View details Austria Manufacturing / Engineering
    Ransomware tanufwater.com id27696 View details Oman Agriculture / Food
    Ransomware elmwoodhomecare.com id27695 View details United Kingdom Healthcare / Pharma
    Ransomware pkmsteel.com id27694 View details India Manufacturing / Engineering
    Ransomware al-alawi.com id27693 View details Oman Finance / Legal / Insurance
    Ransomware index-precast.com id27692 View details Finland Construction / Real Estate
    Ransomware ikron.org id27691 View details United States Healthcare / Pharma
    Ransomware webster-schools.org id27690 View details United States Education
    Ransomware societaitalianaalimenti.it id27689 View details Italy Agriculture / Food