babuk2
Also known as: SatanlockFirst seen January 27, 2025Active180 claimed victims
The claims below are reproduced as posted by babuk2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Babuk Locker 2.0, also known as Bjorka or SkyWave, after failing to make any profit from selling public databases on forums, decided to impersonate Babuk Ransomware group. He launched a blog where he claimed multiple public breaches from BreachForums as ransomware attacks
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Mandarin.com.br | March 10, 2025 | ransomware_live | — |
| Access to Indian Ministry of Defence and Military Secret (DRDO) documents By Babuk Locker ... | March 10, 2025 | ransomware_live | — |
| bank.pingan.com (CN) | March 10, 2025 | ransomware_live | — |
| misaludhealth.com | March 10, 2025 | ransomware_live | — |
| petstop.com Company | March 10, 2025 | ransomware_live | — |
| MYPERTAMINA INDONESIA | January 28, 2025 | ransomware_live | — |
| MYINDIHOME TELKOM INDONESIA | January 28, 2025 | ransomware_live | — |
| MYINDIHOME TELKOM INDONESIA by ( Babuk Locker ) | January 28, 2025 | ransomware_live | — |
| INDONESIA TAXPAYER IDENTIFICATION NUMBER (NPWP) | January 28, 2025 | ransomware_live | — |
| www.scadea.com | January 27, 2025 | ransomware_live | — |
| www.computan.com | January 27, 2025 | ransomware_live | — |
| www.kovra.com.my | January 27, 2025 | ransomware_live | — |
| www.lapastina.com | January 27, 2025 | ransomware_live | — |
| www.industrialdealimentos.com | January 27, 2025 | ransomware_live | — |
| www.avantit.no | January 27, 2025 | ransomware_live | — |
| www.constelacion.com.sv | January 27, 2025 | ransomware_live | — |
| www.agenciahost.com | January 27, 2025 | ransomware_live | — |
| www.aretusamilano.it | January 27, 2025 | ransomware_live | — |
| www.betteraccountingsolutions.com | January 27, 2025 | ransomware_live | — |
| www.hcisystems.net | January 27, 2025 | ransomware_live | — |
| www.nrshealthcare.com | January 27, 2025 | ransomware_live | — |
| www.farmaciaflorio.com | January 27, 2025 | ransomware_live | — |
| www.skywaycoach.ca | January 27, 2025 | ransomware_live | — |
| Baca County Feedyard, Inc | January 27, 2025 | ransomware_live | — |
| www.cyncsolutions.com | January 27, 2025 | ransomware_live | — |
| www.merchant.id | January 27, 2025 | ransomware_live | — |
| www.spmundi.com.br | January 27, 2025 | ransomware_live | — |
| www.siea.sk | January 27, 2025 | ransomware_live | — |
| www.dvttechnologyltd.com | January 27, 2025 | ransomware_live | — |
| www.rekamy.com | January 27, 2025 | ransomware_live | — |
| www.go4kora.tv | January 27, 2025 | ransomware_live | — |
| www.ykp.com.br | January 27, 2025 | ransomware_live | — |
| www.al-shefafarm.ro | January 27, 2025 | ransomware_live | — |
| headwaterco.com | January 27, 2025 | ransomware_live | — |
| www.shootinghouse.com.br | January 27, 2025 | ransomware_live | — |
| gstpam.org | January 27, 2025 | ransomware_live | — |
| indianaerospaceandengineering.com | January 27, 2025 | ransomware_live | — |
| lamundialdeseguros.com | January 27, 2025 | ransomware_live | — |
| bee-insurance.com | January 27, 2025 | ransomware_live | — |
| dealplexus.com | January 27, 2025 | ransomware_live | — |
| mandiricoal.net | January 27, 2025 | ransomware_live | — |
| fpsc-anz.com | January 27, 2025 | ransomware_live | — |
| senseis.xmp.net | January 27, 2025 | ransomware_live | — |
| thebetareview.com | January 27, 2025 | ransomware_live | — |
| wacer.com.au | January 27, 2025 | ransomware_live | — |
| workers.com.zm | January 27, 2025 | ransomware_live | — |
| gervetusa.com | January 27, 2025 | ransomware_live | — |
| singularanalysts.com | January 27, 2025 | ransomware_live | — |
| pti.agency | January 27, 2025 | ransomware_live | — |
| sincorpe.org.br | January 27, 2025 | ransomware_live | — |
| mtgazeta.uz | January 27, 2025 | ransomware_live | — |
| abd-ong.org | January 27, 2025 | ransomware_live | — |
| pbos.gov.pk | January 27, 2025 | ransomware_live | — |
| rtdc.gov.mn | January 27, 2025 | ransomware_live | — |
| skopje.gov.mk | January 27, 2025 | ransomware_live | — |
| maxprofit.mcode.me | January 27, 2025 | ransomware_live | — |
| zetech.ac.ke | January 27, 2025 | ransomware_live | — |
| precisediagnosticspacs.com | January 27, 2025 | ransomware_live | — |
| a top-tier law firm in Workers Compensation Defense! | January 27, 2025 | ransomware_live | — |
| APMS ( Advanced Physician Management Service LLC | January 27, 2025 | ransomware_live | — |
| nhbg.com.co | January 27, 2025 | ransomware_live | — |
| carc.gov.jo | January 27, 2025 | ransomware_live | — |
| zapopan.gob.mx | January 27, 2025 | ransomware_live | — |
| Kurosu & Co.SA - kurosu.com.py | January 27, 2025 | ransomware_live | — |
| gelco-s-a.com.br | January 27, 2025 | ransomware_live | — |
| viacaojacarei.com.br | January 27, 2025 | ransomware_live | — |
| Württemberger Medien | January 27, 2025 | ransomware_live | — |
| alentec.com | January 27, 2025 | ransomware_live | — |
| copral.com.br | January 27, 2025 | ransomware_live | — |
| dardoc.com | November 25, 2024 | ransomware_live | — |
| knesset.gov.il | October 25, 2024 | ransomware_live | — |
| modiin-ezrachi.co.il | October 12, 2024 | ransomware_live | — |
| ascires.com | October 11, 2024 | ransomware_live | — |
| elsoms.com | September 7, 2024 | ransomware_live | — |
| towellengineering.net | August 15, 2024 | ransomware_live | — |
| kominfo.go.id | July 1, 2024 | ransomware_live | — |
| heras.co.uk | May 29, 2024 | ransomware_live | — |
| alliedwoundcare.com | January 12, 2024 | ransomware_live | — |
| bocagroup.com | February 1, 2021 | ransomware_live | — |
| human.de | February 1, 2021 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).