Ransomware Group intelligence

Lockbit5

Active

Track Lockbit5 with 329 published victims and 22 known leak locations in a single intelligence view.

Victims 329 Known published victims in this dataset
First discovered 2025-12-07 Earliest victim discovery date
Last discovered 2026-07-11 Latest victim discovery date
Inactive since 7 days Days since the latest known victim
Top country United States 58 victims
Known locations 22 Leak or negotiation infrastructure tracked

Overview

Lockbit5 is tracked by Breach House as a ransomware group with 329 published victims.

United States is currently the most targeted country in this dataset.

22 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (22)

    Label Type Availability Links
    Leak location 1 Onion service Unknown lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion
    Leak location 2 Onion service Unknown lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion
    Leak location 3 Onion service Unknown lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
    Leak location 4 Onion service Unknown lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion
    Leak location 5 Onion service Unknown lockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onion
    Leak location 6 Onion service Unknown lockbitabmbzz652qeqd7yztgugcihpy4s4f6zuqi3jx32rzjylsn7ad.onion
    Leak location 7 Onion service Unknown lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
    Leak location 8 Onion service Unknown lockbitdx4kanolaotenc3nmonlxv5enmhxdh2lk54rirvcdsljfbjyd.onion
    Leak location 9 Onion service Unknown lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
    Leak location 10 Onion service Unknown lockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion
    Leak location 11 Onion service Unknown lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
    Leak location 12 Onion service Unknown lockbitgf43c7avhx5wesx5ambjgbormhwc2tujsy6lvg6drkjhnjryd.onion
    Leak location 13 Onion service Unknown lockbithn5a2qgf4ojvut3q25yylrauvjxrz6sjdd4teas65osru2lqd.onion
    Leak location 14 Onion service Unknown lockbitjqfuyrkxiie6bcly6ow4sh6lmyuyvyats5hcpe5e6hbuhikyd.onion
    Leak location 15 Onion service Unknown lockbitkybiqhyv64vdaamz7uf2ymjoafyalx3e6spmmsz5xyk5nbcad.onion
    Leak location 16 Onion service Unknown lockbitnpobu6luzzlxb7br5uyqnmeruwimpjuw2kv442nvxd6sufsad.onion
    Leak location 17 Onion service Unknown lockbitotfzuq2lpyydzgbhelps2mcz62cpix4nzpcyaak5444iwfmqd.onion
    Leak location 18 Onion service Unknown lockbitqth2ij5cdqmj4cdchoh3etnlbh74utqviwqb5svvhxygnmoqd.onion
    Leak location 19 Onion service Unknown lockbity3v2rhjjjt6opcgvdrrlvdbrt3p2wqmxmq4cm36cchphdy6qd.onion
    Leak location 20 Onion service Unknown lockbity44loulvujiaoels7knti2tfsnglclnse22syaa6x3vpqp7yd.onion
    Leak location 21 Onion service Unknown lockbitynxdcxtuvma5deq5pxtnqoacftuigkk37xjq3whefozdpcuad.onion
    Leak location 22 Onion service Unknown lockbityq64mwtobqqcr3iwxs5q4o7iliuv72gbx4vflggj4m4wqekad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (329)

    Search, filter and paginate the victim timeline for Lockbit5. Showing 201–300 of 329.

    Type Target Discovered Country Business Category Intel Link
    Ransomware isesa.cl id26535 View details Chile Manufacturing / Engineering
    Ransomware sosltda.com id26534 View details Colombia Communication / Marketing
    Ransomware sevenstarsgracebay.com id26533 View details Turks and Caicos Islands Hospitality / Food & Beverage / Tourism
    Ransomware bardahl.com.mx id26285 View details Mexico Hospitality / Food & Beverage / Tourism
    Ransomware latinoseguros.com.mx id26284 View details Mexico Finance / Legal / Insurance
    Ransomware autoservizilocatelli.it id26283 View details Italy Other
    Ransomware gruposelpe.com.br id26282 View details Brazil Services
    Ransomware guarnera.com.br id26281 View details Brazil Finance / Legal / Insurance
    Ransomware kenta.com.br id26280 View details Brazil Finance / Legal / Insurance
    Ransomware grupoferrosider.com.br id26279 View details Brazil Manufacturing / Engineering
    Ransomware aditusbr.com id25672 View details Brazil Services
    Ransomware us-duct.com id25671 View details United States Manufacturing / Engineering
    Ransomware gob.mx id25670 View details Mexico Public Sector
    Ransomware frandent.it id25669 View details Italy Other
    Ransomware veenkoloniaalmuseum.nl id25623 View details Netherlands Other
    Ransomware depotnapoli.com id25596 View details Italy Hospitality / Food & Beverage / Tourism
    Ransomware hilden.in id25387 View details India Manufacturing / Engineering
    Ransomware mtspokanepediatrics.com id25271 View details United States Healthcare / Pharma
    Ransomware collinscomputing.com id25240 View details United States Finance / Legal / Insurance
    Ransomware drogales.com.br id25239 View details Brazil Healthcare / Pharma
    Ransomware eroselevators.com id25238 View details India Other
    Ransomware esopdirect.com id25237 View details India Other
    Ransomware fortishealthcare.com id25236 View details India Healthcare / Pharma
    Ransomware surfishtrade.com id25203 View details Peru Communication / Marketing
    Ransomware klax.de id25202 View details Germany Other
    Ransomware labayenylaborde.com id25201 View details Spain Other
    Ransomware samkee.com id25200 View details Korea, Republic of Manufacturing / Engineering
    Ransomware drako.com.mx id25152 View details Mexico Other
    Ransomware inspired.ee id25151 View details Estonia Communication / Marketing
    Ransomware zszeleznice.cz id25150 View details Czechia Other
    Ransomware urfishtrade.com id25149 View details Germany Other
    Ransomware towellholding.com id25148 View details Oman Communication / Marketing
    Ransomware tecnicarobertorocca.edu.ar id25147 View details Argentina Other
    Ransomware technicare.com.br id25146 View details Brazil IT
    Ransomware tealca.com id25145 View details Venezuela, Bolivarian Republic of Transportation / Travel / Logistics
    Ransomware soeuae.ae id25144 View details United Arab Emirates Communication / Marketing
    Ransomware savantivibranti.com id25143 View details Italy Communication / Marketing
    Ransomware puzio-saunierduval.fr id25142 View details France Communication / Marketing
    Ransomware optral.com id25141 View details Spain Manufacturing / Engineering
    Ransomware omf.org id25140 View details United States Other
    Ransomware occgrouptr.com id25139 View details Türkiye Services
    Ransomware mostykatowice.pl id25138 View details Poland Communication / Marketing
    Ransomware prommgroup.com id25137 View details Russian Federation Communication / Marketing
    Ransomware q-ads.com id25136 View details Germany Communication / Marketing
    Ransomware smed.at id25135 View details Austria Healthcare / Pharma
    Ransomware clipan.co.id id25134 View details Indonesia Finance / Legal / Insurance
    Ransomware mc2engineers.com id25133 View details United States Manufacturing / Engineering
    Ransomware lfval.net id25132 View details France Education
    Ransomware laval-virtual.com id25131 View details France IT
    Ransomware kraslice.cz id25130 View details Czechia Other
    Ransomware jefar.be id25129 View details Belgium Other
    Ransomware gumustasmaden.com.tr id25128 View details Türkiye Communication / Marketing
    Ransomware geselektrik.com.tr id25127 View details Türkiye Other
    Ransomware gccservices.eu id25126 View details France Services
    Ransomware fresh2you.eu id25125 View details Netherlands Other
    Ransomware fortrex.hu id25124 View details Hungary Other
    Ransomware emresorts.com id25123 View details Mexico Hospitality / Food & Beverage / Tourism
    Ransomware d-klima.cz id25122 View details Czechia Services
    Ransomware csd-drancy.com id25121 View details France Other
    Ransomware cmc.com.br id25120 View details Brazil Other
    Ransomware casabotas.es id25119 View details Spain Manufacturing / Engineering
    Ransomware carseo.de id25118 View details Germany Services
    Ransomware bwk-berlin.de id25117 View details Germany Other
    Ransomware bonfilet.com.tr id25116 View details Türkiye Communication / Marketing
    Ransomware behranlift.com id25115 View details Iran, Islamic Republic of Manufacturing / Engineering
    Ransomware arabfalcons.com id25114 View details Saudi Arabia Communication / Marketing
    Ransomware anwalt-austria.at id25113 View details Austria Communication / Marketing
    Ransomware amw-treuhand.ch id25112 View details Switzerland Other
    Ransomware agfri.com id25111 View details Spain Manufacturing / Engineering
    Ransomware acarlar.com.tr id25110 View details Türkiye Services
    Ransomware rdmetals.nl id25109 View details Netherlands Manufacturing / Engineering
    Ransomware ambisig.com id25108 View details Portugal Public Sector
    Ransomware shwapno.com id25107 View details Bangladesh Retail / E-commerce
    Ransomware semplastik.com.tr id25106 View details Türkiye Manufacturing / Engineering
    Ransomware proplastics.co.zw id25105 View details Zimbabwe Manufacturing / Engineering
    Ransomware platinumpws.com id25104 View details Malaysia Other
    Ransomware npiav.com id25103 View details United States Communication / Marketing
    Ransomware manuaco.pt id25102 View details Portugal Communication / Marketing
    Ransomware itgsolutions.com id25101 View details Jordan Services
    Ransomware grupoconstrutodo.com id25100 View details Mexico Other
    Ransomware uniplaclages.edu.br id24986 View details Brazil Education
    Ransomware keystoliteracy.com id24935 View details United States Education
    Ransomware pdcm.com id24934 View details United States Finance / Legal / Insurance
    Ransomware tuscon-physicans.com id24933 View details United States Healthcare / Pharma
    Ransomware clarindahealth.com id24932 View details United States Healthcare / Pharma
    Ransomware maasa.com.ar id24931 View details Argentina Communication / Marketing
    Ransomware axxel.biz id24930 View details Singapore Communication / Marketing
    Ransomware firstrateak.com id24929 View details United States Finance / Legal / Insurance
    Ransomware jvdbassoc.com id24928 View details United States Other
    Ransomware walters-group.co.uk id24927 View details United Kingdom Manufacturing / Engineering
    Ransomware insightchicago.com id24529 View details United States Healthcare / Pharma
    Ransomware jobberswarehouse.com id24528 View details Transportation / Travel / Logistics
    Ransomware rjwalker.com id24527 View details United States Services
    Ransomware topackt.com id24526 View details United States Communication / Marketing
    Ransomware aerworldwide.com id24525 View details United States Other
    Ransomware 51talk.com id24524 View details Philippines Education
    Ransomware terracaribbean.com id24523 View details Barbados Construction / Real Estate
    Ransomware brumfieldconstructioninc.com id24522 View details United States Construction / Real Estate
    Ransomware asiapacificex.com id24521 View details Hong Kong Communication / Marketing
    Ransomware crystal-d.com id24520 View details Germany Communication / Marketing