Ransomware Group intelligence

Lockbit5

Active

Track Lockbit5 with 383 published victims and 23 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 383 Known published victims in this dataset
First discovered 2025-12-07 Earliest victim discovery date
Last discovered 2026-10-15 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 69 victims
Known locations 23 Leak or negotiation infrastructure tracked

Overview

Lockbit5 is tracked by Breach House as a ransomware group with 383 published victims.

United States is currently the most targeted country in this dataset.

23 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 316 82.5%
  • Pending 63 16.4%
  • Deleted 4 1.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (23)

    Label Type Availability Links
    Leak location 23 Onion service Up checked 1h ago lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion
    Leak location 17 Onion service Up checked 1h ago lockbitotfzuq2lpyydzgbhelps2mcz62cpix4nzpcyaak5444iwfmqd.onion
    Leak location 3 Onion service Up checked 1h ago lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
    Leak location 2 Onion service Up checked 1h ago lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion
    Leak location 22 Onion service Down checked 1h ago lockbityq64mwtobqqcr3iwxs5q4o7iliuv72gbx4vflggj4m4wqekad.onion
    Leak location 21 Onion service Down checked 1h ago lockbitynxdcxtuvma5deq5pxtnqoacftuigkk37xjq3whefozdpcuad.onion
    Leak location 20 Onion service Down checked 1h ago lockbity44loulvujiaoels7knti2tfsnglclnse22syaa6x3vpqp7yd.onion
    Leak location 19 Onion service Down checked 1h ago lockbity3v2rhjjjt6opcgvdrrlvdbrt3p2wqmxmq4cm36cchphdy6qd.onion
    Leak location 18 Onion service Down checked 1h ago lockbitqth2ij5cdqmj4cdchoh3etnlbh74utqviwqb5svvhxygnmoqd.onion
    Leak location 16 Onion service Down checked 1h ago lockbitnpobu6luzzlxb7br5uyqnmeruwimpjuw2kv442nvxd6sufsad.onion
    Leak location 15 Onion service Down checked 1h ago lockbitkybiqhyv64vdaamz7uf2ymjoafyalx3e6spmmsz5xyk5nbcad.onion
    Leak location 14 Onion service Down checked 1h ago lockbitjqfuyrkxiie6bcly6ow4sh6lmyuyvyats5hcpe5e6hbuhikyd.onion
    Leak location 13 Onion service Down checked 1h ago lockbithn5a2qgf4ojvut3q25yylrauvjxrz6sjdd4teas65osru2lqd.onion
    Leak location 12 Onion service Down checked 1h ago lockbitgf43c7avhx5wesx5ambjgbormhwc2tujsy6lvg6drkjhnjryd.onion
    Leak location 11 Onion service Down checked 1h ago lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
    Leak location 10 Onion service Down checked 1h ago lockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion
    Leak location 9 Onion service Down checked 1h ago lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
    Leak location 8 Onion service Down checked 1h ago lockbitdx4kanolaotenc3nmonlxv5enmhxdh2lk54rirvcdsljfbjyd.onion
    Leak location 7 Onion service Down checked 1h ago lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
    Leak location 6 Onion service Down checked 1h ago lockbitabmbzz652qeqd7yztgugcihpy4s4f6zuqi3jx32rzjylsn7ad.onion
    Leak location 5 Onion service Down checked 1h ago lockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onion
    Leak location 4 Onion service Down checked 1h ago lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion
    Leak location 1 Onion service Down checked 1h ago lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion

    Top Activity Sectors (17)

    Victims (383)

    Search, filter and paginate the victim timeline for Lockbit5. Showing 201–300 of 383.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware limpebras.com.br id27687 View details Brazil Services leaked
    Ransomware commerfrutta.com id27686 View details Italy Agriculture / Food leaked
    Ransomware facsrl.net id27685 View details Italy Manufacturing / Engineering leaked
    Ransomware alcornschools.org id27684 View details United States Education leaked
    Ransomware frasierlaw.com id27683 View details United States Finance / Legal / Insurance leaked
    Ransomware cognitivehealthit.com id27682 View details United States IT leaked
    Ransomware bassignanicave.it id27681 View details Italy Manufacturing / Engineering leaked
    Ransomware toncandigital.com id27680 View details United States Communication / Marketing leaked
    Ransomware ssskwt.com id27679 View details Kuwait Construction / Real Estate leaked
    Ransomware roamingnetworks.rs id27678 View details Serbia Telecommunications leaked
    Ransomware manchester.com.mx id27677 View details Mexico Retail / E-commerce leaked
    Ransomware glop.mx id27676 View details Mexico Communication / Marketing leaked
    Ransomware flamagasindia.com id27675 View details India Manufacturing / Engineering leaked
    Ransomware charliebears.com.au id27674 View details Australia Retail / E-commerce leaked
    Ransomware rovinj-rovigno.hr id27673 View details Croatia Public Sector leaked
    Ransomware breastcare.com id27672 View details United States Healthcare / Pharma leaked
    Ransomware jean.com.tw id27671 View details Taiwan, Province of China Manufacturing / Engineering leaked
    Ransomware sidercentersas.com id27670 View details Colombia Manufacturing / Engineering leaked
    Ransomware sesi.org.br id27669 View details Brazil NGOs / Associations leaked
    Ransomware senai.br id27668 View details Brazil Education leaked
    Ransomware fiepe.org.br id27667 View details Brazil NGOs / Associations leaked
    Ransomware luetz-binder.de id27666 View details Germany Manufacturing / Engineering leaked
    Ransomware gov.krd id27665 View details Iraq Public Sector leaked
    Ransomware ombudsman.gov.ws id27664 View details Samoa Public Sector leaked
    Ransomware nandrin.be id27663 View details Belgium Public Sector leaked
    Ransomware isoledilcappotti.it id27662 View details Italy Construction / Real Estate leaked
    Ransomware yaomazi.com id26953 View details China Agriculture / Food leaked
    Ransomware omaxauto.com id26952 View details India Manufacturing / Engineering leaked
    Ransomware brassuco.com.br id26951 View details Brazil Agriculture / Food leaked
    Ransomware diesel-electric.co.za id26950 View details South Africa Other leaked
    Ransomware fcc-inc.com id26753 View details United States Communication / Marketing leaked
    Ransomware vilati.com id26752 View details Russian Federation Manufacturing / Engineering leaked
    Ransomware utc.com.kw id26751 View details Kuwait Retail / E-commerce leaked
    Ransomware mengseng.com id26750 View details Thailand Manufacturing / Engineering leaked
    Ransomware maxusacorp.com id26749 View details United States Hospitality / Food & Beverage / Tourism leaked
    Ransomware lasevillanita.com id26748 View details Colombia Transportation / Travel / Logistics leaked
    Ransomware dmxm.com id26747 View details United States Manufacturing / Engineering leaked
    Ransomware yfynqygs.com id26746 View details Public Sector pending
    Ransomware czkingdee.com id26745 View details China Other leaked
    Ransomware humsnlr.com id26744 View details United States Other leaked
    Ransomware crystalcoastpm.com id26743 View details United States Communication / Marketing leaked
    Ransomware xpressnebs.com id26742 View details Germany Communication / Marketing deleted
    Ransomware wjnklaw.com id26741 View details United States Finance / Legal / Insurance leaked
    Ransomware smilescare.com id26740 View details United States Other leaked
    Ransomware moa.gov.eg id26739 View details Egypt Agriculture / Food leaked
    Ransomware associated.org id26738 View details United States NGOs / Associations leaked
    Ransomware wilhelmsen.com id26737 View details Norway Other leaked
    Ransomware davila.cl id26736 View details Chile Other leaked
    Ransomware cs.at id26541 View details Austria Other leaked
    Ransomware hanover-ma.gov id26540 View details United States Communication / Marketing leaked
    Ransomware sands.mu id26539 View details Mauritius Hospitality / Food & Beverage / Tourism leaked
    Ransomware cmcconstruct.com id26538 View details Romania Construction / Real Estate pending
    Ransomware renovagy.com id26537 View details Germany Services pending
    Ransomware aeromedsocaustralasia.org id26536 View details Australia NGOs / Associations leaked
    Ransomware isesa.cl id26535 View details Chile Manufacturing / Engineering leaked
    Ransomware sosltda.com id26534 View details Colombia Communication / Marketing leaked
    Ransomware sevenstarsgracebay.com id26533 View details Turks and Caicos Islands Hospitality / Food & Beverage / Tourism leaked
    Ransomware bardahl.com.mx id26285 View details Mexico Hospitality / Food & Beverage / Tourism leaked
    Ransomware latinoseguros.com.mx id26284 View details Mexico Finance / Legal / Insurance leaked
    Ransomware autoservizilocatelli.it id26283 View details Italy Other leaked
    Ransomware gruposelpe.com.br id26282 View details Brazil Services leaked
    Ransomware guarnera.com.br id26281 View details Brazil Finance / Legal / Insurance leaked
    Ransomware kenta.com.br id26280 View details Brazil Finance / Legal / Insurance leaked
    Ransomware grupoferrosider.com.br id26279 View details Brazil Manufacturing / Engineering leaked
    Ransomware aditusbr.com id25672 View details Brazil Services leaked
    Ransomware us-duct.com id25671 View details United States Manufacturing / Engineering pending
    Ransomware gob.mx id25670 View details Mexico Public Sector leaked
    Ransomware frandent.it id25669 View details Italy Other leaked
    Ransomware veenkoloniaalmuseum.nl id25623 View details Netherlands Other leaked
    Ransomware depotnapoli.com id25596 View details Italy Hospitality / Food & Beverage / Tourism leaked
    Ransomware hilden.in id25387 View details India Manufacturing / Engineering leaked
    Ransomware mtspokanepediatrics.com id25271 View details United States Healthcare / Pharma leaked
    Ransomware collinscomputing.com id25240 View details United States Finance / Legal / Insurance leaked
    Ransomware drogales.com.br id25239 View details Brazil Healthcare / Pharma leaked
    Ransomware eroselevators.com id25238 View details India Other leaked
    Ransomware esopdirect.com id25237 View details India Other leaked
    Ransomware fortishealthcare.com id25236 View details India Healthcare / Pharma leaked
    Ransomware surfishtrade.com id25203 View details Peru Communication / Marketing pending
    Ransomware klax.de id25202 View details Germany Other leaked
    Ransomware labayenylaborde.com id25201 View details Spain Other leaked
    Ransomware samkee.com id25200 View details Korea, Republic of Manufacturing / Engineering leaked
    Ransomware drako.com.mx id25152 View details Mexico Other leaked
    Ransomware inspired.ee id25151 View details Estonia Communication / Marketing leaked
    Ransomware zszeleznice.cz id25150 View details Czechia Other leaked
    Ransomware urfishtrade.com id25149 View details Germany Other pending
    Ransomware towellholding.com id25148 View details Oman Communication / Marketing leaked
    Ransomware tecnicarobertorocca.edu.ar id25147 View details Argentina Other leaked
    Ransomware technicare.com.br id25146 View details Brazil IT leaked
    Ransomware tealca.com id25145 View details Venezuela, Bolivarian Republic of Transportation / Travel / Logistics leaked
    Ransomware soeuae.ae id25144 View details United Arab Emirates Communication / Marketing leaked
    Ransomware savantivibranti.com id25143 View details Italy Communication / Marketing leaked
    Ransomware puzio-saunierduval.fr id25142 View details France Communication / Marketing leaked
    Ransomware optral.com id25141 View details Spain Manufacturing / Engineering leaked
    Ransomware omf.org id25140 View details United States Other leaked
    Ransomware occgrouptr.com id25139 View details Türkiye Services leaked
    Ransomware mostykatowice.pl id25138 View details Poland Communication / Marketing leaked
    Ransomware prommgroup.com id25137 View details Russian Federation Communication / Marketing leaked
    Ransomware q-ads.com id25136 View details Germany Communication / Marketing leaked
    Ransomware smed.at id25135 View details Austria Healthcare / Pharma leaked
    Ransomware clipan.co.id id25134 View details Indonesia Finance / Legal / Insurance leaked