BreachCensus

lockbit2

First seen September 9, 2021Active1,002 claimed victims

The claims below are reproduced as posted by lockbit2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
datalit.itJune 28, 2022ransomware_live—
oak-brook.orgJune 26, 2022ransomware_live—
agricolaandrea....June 21, 2022ransomware_live—
farmaciacirici....June 21, 2022ransomware_live—
sigma-alimentos...June 21, 2022ransomware_live—
coteg-azam.frJune 21, 2022ransomware_live—
ecos-office.comJune 21, 2022ransomware_live—
acac.comJune 20, 2022ransomware_live—
emprint.comJune 20, 2022ransomware_live—
plagepalace.comJune 20, 2022ransomware_live—
kuwaitairways.c...June 20, 2022ransomware_live—
rhenus.groupJune 20, 2022ransomware_live—
builditinc.comJune 20, 2022ransomware_live—
business.gov.omJune 20, 2022ransomware_live—
optomaJune 19, 2022ransomware_live—
lundinroof.comJune 18, 2022ransomware_live—
tb-kawashima.co...June 18, 2022ransomware_live—
vectorinf.com.b...June 18, 2022ransomware_live—
bestattJune 17, 2022ransomware_live—
http://www.lund...June 17, 2022ransomware_live—
https://www.tb-...June 17, 2022ransomware_live—
keisei-June 17, 2022ransomware_live—
ardebolassessorJune 16, 2022ransomware_live—
bestattung-June 16, 2022ransomware_live—
dgi.gouv.mlJune 15, 2022ransomware_live—
gruppowasteital...June 14, 2022ransomware_live—
https://www.dgi...June 14, 2022ransomware_live—
enclosuresolutiJune 14, 2022ransomware_live—
genusplc.comJune 14, 2022ransomware_live—
medcoenergi.comJune 14, 2022ransomware_live—
ptg.com.auJune 13, 2022ransomware_live—
sanvitale.rJune 12, 2022ransomware_live—
slgienergy.comJune 12, 2022ransomware_live—
sesJune 11, 2022ransomware_live—
cargoexperts.euJune 10, 2022ransomware_live—
www.vectorinf.c...June 10, 2022ransomware_live—
virtus-June 9, 2022ransomware_live—
kaisoten.co.jpJune 9, 2022ransomware_live—
https://www.equ...June 7, 2022ransomware_live—
gpmlJune 7, 2022ransomware_live—
equis.comJune 7, 2022ransomware_live—
IBRCN.COMJune 6, 2022ransomware_live—
hyatts.comJune 6, 2022ransomware_live—
linmark.comJune 6, 2022ransomware_live—
patralogistik.c...June 6, 2022ransomware_live—
sesver.gob.mxJune 6, 2022ransomware_live—
kanJune 6, 2022ransomware_live—
mandiant.comJune 6, 2022ransomware_live—
bestattung-walz...June 5, 2022ransomware_live—
kansashighwaypa...June 5, 2022ransomware_live—
familyclinicbri...June 4, 2022ransomware_live—
colonail.comJune 4, 2022ransomware_live—
ora.comJune 4, 2022ransomware_live—
specpharm.co.zaJune 4, 2022ransomware_live—
wik-group.comJune 4, 2022ransomware_live—
rosagroupJune 4, 2022ransomware_live—
vainieritraspor...June 4, 2022ransomware_live—
sportJune 3, 2022ransomware_live—
cepimaJune 2, 2022ransomware_live—
hilltopconstrucJune 2, 2022ransomware_live—
compagniedepJune 2, 2022ransomware_live—
jewelry.orJune 2, 2022ransomware_live—
closetheloopeu....June 2, 2022ransomware_live—
bradfoJune 1, 2022ransomware_live—
gpmlife.comMay 30, 2022ransomware_live—
tcpharmachem.co...May 30, 2022ransomware_live—
inlaMay 30, 2022ransomware_live—
intertabak.comMay 30, 2022ransomware_live—
hospitalsanjose...May 29, 2022ransomware_live—
pauly.deMay 29, 2022ransomware_live—
koenigstahl.plMay 29, 2022ransomware_live—
foxconnbc.comMay 29, 2022ransomware_live—
skinnertranMay 27, 2022ransomware_live—
kerrylogMay 27, 2022ransomware_live—
edm-stone.comMay 26, 2022ransomware_live—
ils.theinnovate...May 26, 2022ransomware_live—
pointsbet.comMay 25, 2022ransomware_live—
virtus-advocate...May 24, 2022ransomware_live—
www.intertabak....May 24, 2022ransomware_live—
architectenbure...May 24, 2022ransomware_live—
erdwaerme-gruen...May 24, 2022ransomware_live—
kuwaitflourmill...May 24, 2022ransomware_live—
pet-link.comMay 24, 2022ransomware_live—
https://www.vit...May 24, 2022ransomware_live—
vitalprev.com.b...May 24, 2022ransomware_live—
etrpMay 23, 2022ransomware_live—
berschneider.deMay 23, 2022ransomware_live—
seatarrabida.ptMay 22, 2022ransomware_live—
reitznerMay 22, 2022ransomware_live—
focusadventure..May 21, 2022ransomware_live—
bataMay 20, 2022ransomware_live—
morrisonexpress...May 20, 2022ransomware_live—
firbarcarolo.itMay 20, 2022ransomware_live—
deMay 20, 2022ransomware_live—
salumificiovene...May 20, 2022ransomware_live—
bsm.upf.edMay 20, 2022ransomware_live—
http://wsretail...May 19, 2022ransomware_live—
fed-gmbh.deMay 19, 2022ransomware_live—
gdctax.com.auMay 19, 2022ransomware_live—
groupe-trouille...May 19, 2022ransomware_live—
Page 1 of 11Older →

Claim data from ransomware.live and RansomLook (CC BY 4.0).