Ransomware Group intelligence

Lockbit5

Active

Track Lockbit5 with 384 published victims and 23 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 384 Known published victims in this dataset
First discovered 2025-12-07 Earliest victim discovery date
Last discovered 2026-08-31 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 69 victims
Known locations 23 Leak or negotiation infrastructure tracked

Overview

Lockbit5 is tracked by Breach House as a ransomware group with 384 published victims.

United States is currently the most targeted country in this dataset.

23 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (23)

    Label Type Availability Links
    Leak location 21 Onion service Up checked 4h ago lockbitynxdcxtuvma5deq5pxtnqoacftuigkk37xjq3whefozdpcuad.onion
    Leak location 20 Onion service Up checked 4h ago lockbity44loulvujiaoels7knti2tfsnglclnse22syaa6x3vpqp7yd.onion
    Leak location 22 Onion service Up checked 4h ago lockbityq64mwtobqqcr3iwxs5q4o7iliuv72gbx4vflggj4m4wqekad.onion
    Leak location 23 Onion service Up checked 4h ago lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion
    Leak location 19 Onion service Up checked 4h ago lockbity3v2rhjjjt6opcgvdrrlvdbrt3p2wqmxmq4cm36cchphdy6qd.onion
    Leak location 18 Onion service Up checked 4h ago lockbitqth2ij5cdqmj4cdchoh3etnlbh74utqviwqb5svvhxygnmoqd.onion
    Leak location 17 Onion service Up checked 4h ago lockbitotfzuq2lpyydzgbhelps2mcz62cpix4nzpcyaak5444iwfmqd.onion
    Leak location 16 Onion service Up checked 4h ago lockbitnpobu6luzzlxb7br5uyqnmeruwimpjuw2kv442nvxd6sufsad.onion
    Leak location 15 Onion service Up checked 4h ago lockbitkybiqhyv64vdaamz7uf2ymjoafyalx3e6spmmsz5xyk5nbcad.onion
    Leak location 6 Onion service Up checked 4h ago lockbitabmbzz652qeqd7yztgugcihpy4s4f6zuqi3jx32rzjylsn7ad.onion
    Leak location 14 Onion service Up checked 4h ago lockbitjqfuyrkxiie6bcly6ow4sh6lmyuyvyats5hcpe5e6hbuhikyd.onion
    Leak location 13 Onion service Up checked 4h ago lockbithn5a2qgf4ojvut3q25yylrauvjxrz6sjdd4teas65osru2lqd.onion
    Leak location 9 Onion service Up checked 4h ago lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
    Leak location 10 Onion service Up checked 4h ago lockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion
    Leak location 7 Onion service Up checked 4h ago lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
    Leak location 8 Onion service Up checked 4h ago lockbitdx4kanolaotenc3nmonlxv5enmhxdh2lk54rirvcdsljfbjyd.onion
    Leak location 5 Onion service Up checked 4h ago lockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onion
    Leak location 3 Onion service Up checked 4h ago lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
    Leak location 1 Onion service Up checked 4h ago lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion
    Leak location 2 Onion service Up checked 4h ago lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion
    Leak location 12 Onion service Down checked 4h ago lockbitgf43c7avhx5wesx5ambjgbormhwc2tujsy6lvg6drkjhnjryd.onion
    Leak location 11 Onion service Down checked 4h ago lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
    Leak location 4 Onion service Down checked 4h ago lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion

    Top Activity Sectors (17)

    Victims (384)

    Search, filter and paginate the victim timeline for Lockbit5. Showing 301–384 of 384.

    Type Target Discovered Country Business Category Intel Link
    Ransomware clipan.co.id id25134 View details Indonesia Finance / Legal / Insurance
    Ransomware mc2engineers.com id25133 View details United States Manufacturing / Engineering
    Ransomware lfval.net id25132 View details France Education
    Ransomware laval-virtual.com id25131 View details France IT
    Ransomware kraslice.cz id25130 View details Czechia Other
    Ransomware jefar.be id25129 View details Belgium Other
    Ransomware gumustasmaden.com.tr id25128 View details Türkiye Communication / Marketing
    Ransomware geselektrik.com.tr id25127 View details Türkiye Other
    Ransomware gccservices.eu id25126 View details France Services
    Ransomware fresh2you.eu id25125 View details Netherlands Other
    Ransomware fortrex.hu id25124 View details Hungary Other
    Ransomware emresorts.com id25123 View details Mexico Hospitality / Food & Beverage / Tourism
    Ransomware d-klima.cz id25122 View details Czechia Services
    Ransomware csd-drancy.com id25121 View details France Other
    Ransomware cmc.com.br id25120 View details Brazil Other
    Ransomware casabotas.es id25119 View details Spain Manufacturing / Engineering
    Ransomware carseo.de id25118 View details Germany Services
    Ransomware bwk-berlin.de id25117 View details Germany Other
    Ransomware bonfilet.com.tr id25116 View details Türkiye Communication / Marketing
    Ransomware behranlift.com id25115 View details Iran, Islamic Republic of Manufacturing / Engineering
    Ransomware arabfalcons.com id25114 View details Saudi Arabia Communication / Marketing
    Ransomware anwalt-austria.at id25113 View details Austria Communication / Marketing
    Ransomware amw-treuhand.ch id25112 View details Switzerland Other
    Ransomware agfri.com id25111 View details Spain Manufacturing / Engineering
    Ransomware acarlar.com.tr id25110 View details Türkiye Services
    Ransomware rdmetals.nl id25109 View details Netherlands Manufacturing / Engineering
    Ransomware ambisig.com id25108 View details Portugal Public Sector
    Ransomware shwapno.com id25107 View details Bangladesh Retail / E-commerce
    Ransomware semplastik.com.tr id25106 View details Türkiye Manufacturing / Engineering
    Ransomware proplastics.co.zw id25105 View details Zimbabwe Manufacturing / Engineering
    Ransomware platinumpws.com id25104 View details Malaysia Other
    Ransomware npiav.com id25103 View details United States Communication / Marketing
    Ransomware manuaco.pt id25102 View details Portugal Communication / Marketing
    Ransomware itgsolutions.com id25101 View details Jordan Services
    Ransomware grupoconstrutodo.com id25100 View details Mexico Other
    Ransomware uniplaclages.edu.br id24986 View details Brazil Education
    Ransomware keystoliteracy.com id24935 View details United States Education
    Ransomware pdcm.com id24934 View details United States Finance / Legal / Insurance
    Ransomware tuscon-physicans.com id24933 View details United States Healthcare / Pharma
    Ransomware clarindahealth.com id24932 View details United States Healthcare / Pharma
    Ransomware maasa.com.ar id24931 View details Argentina Communication / Marketing
    Ransomware axxel.biz id24930 View details Singapore Communication / Marketing
    Ransomware firstrateak.com id24929 View details United States Finance / Legal / Insurance
    Ransomware jvdbassoc.com id24928 View details United States Other
    Ransomware walters-group.co.uk id24927 View details United Kingdom Manufacturing / Engineering
    Ransomware insightchicago.com id24529 View details United States Healthcare / Pharma
    Ransomware jobberswarehouse.com id24528 View details Transportation / Travel / Logistics
    Ransomware rjwalker.com id24527 View details United States Services
    Ransomware topackt.com id24526 View details United States Communication / Marketing
    Ransomware aerworldwide.com id24525 View details United States Other
    Ransomware 51talk.com id24524 View details Philippines Education
    Ransomware terracaribbean.com id24523 View details Barbados Construction / Real Estate
    Ransomware brumfieldconstructioninc.com id24522 View details United States Construction / Real Estate
    Ransomware asiapacificex.com id24521 View details Hong Kong Communication / Marketing
    Ransomware crystal-d.com id24520 View details Germany Communication / Marketing
    Ransomware visionproducts.llc id24519 View details United States Communication / Marketing
    Ransomware kll-law.com id24518 View details United States Finance / Legal / Insurance
    Ransomware hennessyfunds.com id24517 View details United States Finance / Legal / Insurance
    Ransomware ehlers-inc.com id24516 View details United States Services
    Ransomware graphiquedefrance.com id24515 View details United States Retail / E-commerce
    Ransomware arc-com.com id24514 View details United States Communication / Marketing
    Ransomware intellioan.com id24513 View details United States Other
    Ransomware aqhch.com.cn id24512 View details China Manufacturing / Engineering
    Ransomware fepasa.com.ar id24511 View details Argentina Other
    Ransomware grupotersa.com.mx id24510 View details Mexico Other
    Ransomware bioclimaservice.it id24509 View details Italy IT
    Ransomware berjaya-air.com id24508 View details Malaysia Other
    Ransomware montaury.com.br id24507 View details Brazil Construction / Real Estate
    Ransomware milanoristorazione.it id24506 View details Italy Agriculture / Food
    Ransomware kap.co.th id24505 View details Thailand Finance / Legal / Insurance
    Ransomware cadopt.com id24504 View details India IT
    Ransomware marriott.com id24503 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware four-points.marriott.com id24502 View details United States Transportation / Travel / Logistics
    Ransomware iscot.it id24501 View details Italy Communication / Marketing
    Ransomware tracsa.com.mx id24500 View details Mexico Manufacturing / Engineering
    Ransomware chmsbc.org.br id24499 View details Brazil Healthcare / Pharma
    Ransomware elundini.gov.za id24498 View details South Africa Public Sector
    Ransomware comune.balmuccia.vc.it id24497 View details Italy Other
    Ransomware felixvet.com id24496 View details Bulgaria Other
    Ransomware pilgrimpackaging.com id24495 View details United States Other
    Ransomware physiciansmedicalbilling.net id24494 View details United States Healthcare / Pharma
    Ransomware ende.bo id24493 View details Bolivia, Plurinational State of Energy
    Ransomware aeamg.org.br id24492 View details Brazil NGOs / Associations
    Ransomware incolease.com id24491 View details United States Services