Ransomware Group intelligence

Lockbit5

Active

Track Lockbit5 with 383 published victims and 23 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 383 Known published victims in this dataset
First discovered 2025-12-07 Earliest victim discovery date
Last discovered 2026-10-15 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 69 victims
Known locations 23 Leak or negotiation infrastructure tracked

Overview

Lockbit5 is tracked by Breach House as a ransomware group with 383 published victims.

United States is currently the most targeted country in this dataset.

23 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 316 82.5%
  • Pending 63 16.4%
  • Deleted 4 1.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (23)

    Label Type Availability Links
    Leak location 23 Onion service Up checked 1h ago lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion
    Leak location 17 Onion service Up checked 1h ago lockbitotfzuq2lpyydzgbhelps2mcz62cpix4nzpcyaak5444iwfmqd.onion
    Leak location 3 Onion service Up checked 2h ago lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
    Leak location 2 Onion service Up checked 2h ago lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion
    Leak location 22 Onion service Down checked 1h ago lockbityq64mwtobqqcr3iwxs5q4o7iliuv72gbx4vflggj4m4wqekad.onion
    Leak location 21 Onion service Down checked 1h ago lockbitynxdcxtuvma5deq5pxtnqoacftuigkk37xjq3whefozdpcuad.onion
    Leak location 20 Onion service Down checked 1h ago lockbity44loulvujiaoels7knti2tfsnglclnse22syaa6x3vpqp7yd.onion
    Leak location 19 Onion service Down checked 1h ago lockbity3v2rhjjjt6opcgvdrrlvdbrt3p2wqmxmq4cm36cchphdy6qd.onion
    Leak location 18 Onion service Down checked 1h ago lockbitqth2ij5cdqmj4cdchoh3etnlbh74utqviwqb5svvhxygnmoqd.onion
    Leak location 16 Onion service Down checked 1h ago lockbitnpobu6luzzlxb7br5uyqnmeruwimpjuw2kv442nvxd6sufsad.onion
    Leak location 15 Onion service Down checked 1h ago lockbitkybiqhyv64vdaamz7uf2ymjoafyalx3e6spmmsz5xyk5nbcad.onion
    Leak location 14 Onion service Down checked 1h ago lockbitjqfuyrkxiie6bcly6ow4sh6lmyuyvyats5hcpe5e6hbuhikyd.onion
    Leak location 13 Onion service Down checked 1h ago lockbithn5a2qgf4ojvut3q25yylrauvjxrz6sjdd4teas65osru2lqd.onion
    Leak location 12 Onion service Down checked 2h ago lockbitgf43c7avhx5wesx5ambjgbormhwc2tujsy6lvg6drkjhnjryd.onion
    Leak location 11 Onion service Down checked 2h ago lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
    Leak location 10 Onion service Down checked 2h ago lockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion
    Leak location 9 Onion service Down checked 2h ago lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
    Leak location 8 Onion service Down checked 2h ago lockbitdx4kanolaotenc3nmonlxv5enmhxdh2lk54rirvcdsljfbjyd.onion
    Leak location 7 Onion service Down checked 2h ago lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
    Leak location 6 Onion service Down checked 2h ago lockbitabmbzz652qeqd7yztgugcihpy4s4f6zuqi3jx32rzjylsn7ad.onion
    Leak location 5 Onion service Down checked 2h ago lockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onion
    Leak location 4 Onion service Down checked 2h ago lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion
    Leak location 1 Onion service Down checked 2h ago lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion

    Top Activity Sectors (17)

    Victims (383)

    Search, filter and paginate the victim timeline for Lockbit5. Showing 301–383 of 383.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware mc2engineers.com id25133 View details United States Manufacturing / Engineering leaked
    Ransomware lfval.net id25132 View details France Education leaked
    Ransomware laval-virtual.com id25131 View details France IT leaked
    Ransomware kraslice.cz id25130 View details Czechia Other leaked
    Ransomware jefar.be id25129 View details Belgium Other leaked
    Ransomware gumustasmaden.com.tr id25128 View details Türkiye Communication / Marketing leaked
    Ransomware geselektrik.com.tr id25127 View details Türkiye Other leaked
    Ransomware gccservices.eu id25126 View details France Services leaked
    Ransomware fresh2you.eu id25125 View details Netherlands Other leaked
    Ransomware fortrex.hu id25124 View details Hungary Other leaked
    Ransomware emresorts.com id25123 View details Mexico Hospitality / Food & Beverage / Tourism leaked
    Ransomware d-klima.cz id25122 View details Czechia Services leaked
    Ransomware csd-drancy.com id25121 View details France Other leaked
    Ransomware cmc.com.br id25120 View details Brazil Other leaked
    Ransomware casabotas.es id25119 View details Spain Manufacturing / Engineering leaked
    Ransomware carseo.de id25118 View details Germany Services leaked
    Ransomware bwk-berlin.de id25117 View details Germany Other leaked
    Ransomware bonfilet.com.tr id25116 View details Türkiye Communication / Marketing leaked
    Ransomware behranlift.com id25115 View details Iran, Islamic Republic of Manufacturing / Engineering leaked
    Ransomware arabfalcons.com id25114 View details Saudi Arabia Communication / Marketing leaked
    Ransomware anwalt-austria.at id25113 View details Austria Communication / Marketing leaked
    Ransomware amw-treuhand.ch id25112 View details Switzerland Other leaked
    Ransomware agfri.com id25111 View details Spain Manufacturing / Engineering leaked
    Ransomware acarlar.com.tr id25110 View details Türkiye Services leaked
    Ransomware rdmetals.nl id25109 View details Netherlands Manufacturing / Engineering leaked
    Ransomware ambisig.com id25108 View details Portugal Public Sector leaked
    Ransomware shwapno.com id25107 View details Bangladesh Retail / E-commerce leaked
    Ransomware semplastik.com.tr id25106 View details Türkiye Manufacturing / Engineering leaked
    Ransomware proplastics.co.zw id25105 View details Zimbabwe Manufacturing / Engineering leaked
    Ransomware platinumpws.com id25104 View details Malaysia Other leaked
    Ransomware npiav.com id25103 View details United States Communication / Marketing leaked
    Ransomware manuaco.pt id25102 View details Portugal Communication / Marketing leaked
    Ransomware itgsolutions.com id25101 View details Jordan Services leaked
    Ransomware grupoconstrutodo.com id25100 View details Mexico Other leaked
    Ransomware uniplaclages.edu.br id24986 View details Brazil Education leaked
    Ransomware keystoliteracy.com id24935 View details United States Education leaked
    Ransomware pdcm.com id24934 View details United States Finance / Legal / Insurance pending
    Ransomware tuscon-physicans.com id24933 View details United States Healthcare / Pharma pending
    Ransomware clarindahealth.com id24932 View details United States Healthcare / Pharma leaked
    Ransomware maasa.com.ar id24931 View details Argentina Communication / Marketing leaked
    Ransomware axxel.biz id24930 View details Singapore Communication / Marketing leaked
    Ransomware firstrateak.com id24929 View details United States Finance / Legal / Insurance leaked
    Ransomware jvdbassoc.com id24928 View details United States Other leaked
    Ransomware walters-group.co.uk id24927 View details United Kingdom Manufacturing / Engineering leaked
    Ransomware insightchicago.com id24529 View details United States Healthcare / Pharma pending
    Ransomware jobberswarehouse.com id24528 View details Transportation / Travel / Logistics pending
    Ransomware rjwalker.com id24527 View details United States Services leaked
    Ransomware topackt.com id24526 View details United States Communication / Marketing leaked
    Ransomware aerworldwide.com id24525 View details United States Other pending
    Ransomware 51talk.com id24524 View details Philippines Education pending
    Ransomware terracaribbean.com id24523 View details Barbados Construction / Real Estate leaked
    Ransomware brumfieldconstructioninc.com id24522 View details United States Construction / Real Estate leaked
    Ransomware asiapacificex.com id24521 View details Hong Kong Communication / Marketing leaked
    Ransomware crystal-d.com id24520 View details Germany Communication / Marketing pending
    Ransomware visionproducts.llc id24519 View details United States Communication / Marketing pending
    Ransomware kll-law.com id24518 View details United States Finance / Legal / Insurance leaked
    Ransomware hennessyfunds.com id24517 View details United States Finance / Legal / Insurance leaked
    Ransomware ehlers-inc.com id24516 View details United States Services leaked
    Ransomware graphiquedefrance.com id24515 View details United States Retail / E-commerce leaked
    Ransomware arc-com.com id24514 View details United States Communication / Marketing pending
    Ransomware intellioan.com id24513 View details United States Other pending
    Ransomware aqhch.com.cn id24512 View details China Manufacturing / Engineering pending
    Ransomware fepasa.com.ar id24511 View details Argentina Other pending
    Ransomware grupotersa.com.mx id24510 View details Mexico Other pending
    Ransomware bioclimaservice.it id24509 View details Italy IT pending
    Ransomware berjaya-air.com id24508 View details Malaysia Other leaked
    Ransomware montaury.com.br id24507 View details Brazil Construction / Real Estate pending
    Ransomware milanoristorazione.it id24506 View details Italy Agriculture / Food pending
    Ransomware kap.co.th id24505 View details Thailand Finance / Legal / Insurance leaked
    Ransomware cadopt.com id24504 View details India IT pending
    Ransomware marriott.com id24503 View details United States Hospitality / Food & Beverage / Tourism leaked
    Ransomware four-points.marriott.com id24502 View details United States Transportation / Travel / Logistics leaked
    Ransomware iscot.it id24501 View details Italy Communication / Marketing leaked
    Ransomware tracsa.com.mx id24500 View details Mexico Manufacturing / Engineering leaked
    Ransomware chmsbc.org.br id24499 View details Brazil Healthcare / Pharma leaked
    Ransomware elundini.gov.za id24498 View details South Africa Public Sector pending
    Ransomware comune.balmuccia.vc.it id24497 View details Italy Other leaked
    Ransomware felixvet.com id24496 View details Bulgaria Other leaked
    Ransomware pilgrimpackaging.com id24495 View details United States Other pending
    Ransomware physiciansmedicalbilling.net id24494 View details United States Healthcare / Pharma pending
    Ransomware ende.bo id24493 View details Bolivia, Plurinational State of Energy leaked
    Ransomware aeamg.org.br id24492 View details Brazil NGOs / Associations leaked
    Ransomware incolease.com id24491 View details United States Services leaked