lockbit2
First seen September 9, 2021Active1,002 claimed victims
The claims below are reproduced as posted by lockbit2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| gymund.dk | May 19, 2022 | ransomware_live | — |
| skinnertrans.ne... | May 19, 2022 | ransomware_live | — |
| https://clublin... | May 18, 2022 | ransomware_live | — |
| clublinks.com.a... | May 18, 2022 | ransomware_live | — |
| jaykal | May 17, 2022 | ransomware_live | — |
| khs-wp.de | May 17, 2022 | ransomware_live | — |
| 2easy.com.br | May 17, 2022 | ransomware_live | — |
| vivalia.be | May 17, 2022 | ransomware_live | — |
| modetransportat... | May 17, 2022 | ransomware_live | — |
| suntecktts.com | May 17, 2022 | ransomware_live | — |
| arcelormittal.h... | May 16, 2022 | ransomware_live | — |
| hinakaorg.com | May 16, 2022 | ransomware_live | — |
| STU | May 16, 2022 | ransomware_live | — |
| grupocabal.cl | May 16, 2022 | ransomware_live | — |
| http://2easy.co... | May 16, 2022 | ransomware_live | — |
| rexontec.com.tw | May 16, 2022 | ransomware_live | — |
| saludparatodos.... | May 16, 2022 | ransomware_live | — |
| talaadthaii.com | May 16, 2022 | ransomware_live | — |
| teka.com.mx | May 16, 2022 | ransomware_live | — |
| cassagne.com.ar | May 16, 2022 | ransomware_live | — |
| sherpamarketing... | May 16, 2022 | ransomware_live | — |
| boltburdon.co.u... | May 15, 2022 | ransomware_live | — |
| mercyhurst.edu | May 15, 2022 | ransomware_live | — |
| optoma.com | May 14, 2022 | ransomware_live | — |
| hoffsu | May 14, 2022 | ransomware_live | — |
| redgwick. | May 14, 2022 | ransomware_live | — |
| agapemeanslove.... | May 13, 2022 | ransomware_live | — |
| alliancesand.co... | May 13, 2022 | ransomware_live | — |
| purapharm.com | May 13, 2022 | ransomware_live | — |
| bradfordmarine.... | May 13, 2022 | ransomware_live | — |
| mosaiceins.com | May 13, 2022 | ransomware_live | — |
| riken-nosan.com | May 13, 2022 | ransomware_live | — |
| sgservicesud.it | May 13, 2022 | ransomware_live | — |
| www.optoma.com | May 13, 2022 | ransomware_live | — |
| boltburdonkemp.... | May 13, 2022 | ransomware_live | — |
| zine-eskola.eus | May 12, 2022 | ransomware_live | — |
| saskarc.com | May 11, 2022 | ransomware_live | — |
| hansh | May 10, 2022 | ransomware_live | — |
| silverbayseafoo... | May 10, 2022 | ransomware_live | — |
| sportco.com | May 10, 2022 | ransomware_live | — |
| topaces.us | May 10, 2022 | ransomware_live | — |
| safarni.com | May 9, 2022 | ransomware_live | — |
| shimamura.gr.jp | May 9, 2022 | ransomware_live | — |
| realestateconsu... | May 7, 2022 | ransomware_live | — |
| fnoutlet.com | May 6, 2022 | ransomware_live | — |
| mpusd. | May 6, 2022 | ransomware_live | — |
| nipmo.dst.gov.z... | May 6, 2022 | ransomware_live | — |
| jewelry. | May 5, 2022 | ransomware_live | — |
| delcourt.fr | May 5, 2022 | ransomware_live | — |
| liceu.barcelon | May 5, 2022 | ransomware_live | — |
| aref.government... | May 4, 2022 | ransomware_live | — |
| nizing.com.tw | May 4, 2022 | ransomware_live | — |
| rogz.com | May 4, 2022 | ransomware_live | — |
| fivestar | May 3, 2022 | ransomware_live | — |
| vestas | May 2, 2022 | ransomware_live | — |
| agenilsen.no | May 2, 2022 | ransomware_live | — |
| cwaengineers.co... | May 2, 2022 | ransomware_live | — |
| erediriva.it | May 2, 2022 | ransomware_live | — |
| orthopaedie-app... | May 1, 2022 | ransomware_live | — |
| smtuc.pt | May 1, 2022 | ransomware_live | — |
| zdgllc.com | May 1, 2022 | ransomware_live | — |
| card | May 1, 2022 | ransomware_live | — |
| ethiopianai | May 1, 2022 | ransomware_live | — |
| w | April 30, 2022 | ransomware_live | — |
| 7generations.or... | April 30, 2022 | ransomware_live | — |
| hispanoamerican... | April 30, 2022 | ransomware_live | — |
| p | April 30, 2022 | ransomware_live | — |
| sagefruit.com | April 30, 2022 | ransomware_live | — |
| bri | April 29, 2022 | ransomware_live | — |
| watermarkbeachr | April 29, 2022 | ransomware_live | — |
| remar. | April 29, 2022 | ransomware_live | — |
| brid | April 29, 2022 | ransomware_live | — |
| ospreyvideo.com | April 28, 2022 | ransomware_live | — |
| hydromaxusa.com | April 28, 2022 | ransomware_live | — |
| warrengibson.co... | April 27, 2022 | ransomware_live | — |
| schriesheim.de | April 25, 2022 | ransomware_live | — |
| cronos.com.ar | April 25, 2022 | ransomware_live | — |
| emucor.es | April 25, 2022 | ransomware_live | — |
| huesser.ch | April 25, 2022 | ransomware_live | — |
| multimmobiliare... | April 25, 2022 | ransomware_live | — |
| gp | April 24, 2022 | ransomware_live | — |
| kdaponte.com | April 24, 2022 | ransomware_live | — |
| https://valoore... | April 23, 2022 | ransomware_live | — |
| www.tigergroup.... | April 23, 2022 | ransomware_live | — |
| ccfsinc.com | April 23, 2022 | ransomware_live | — |
| greenex | April 23, 2022 | ransomware_live | — |
| tigergroup.ae | April 23, 2022 | ransomware_live | — |
| valoores.com | April 23, 2022 | ransomware_live | — |
| incegd.com | April 22, 2022 | ransomware_live | — |
| beckerlaw.com | April 22, 2022 | ransomware_live | — |
| huntongroup.com | April 22, 2022 | ransomware_live | — |
| wilshire.com | April 22, 2022 | ransomware_live | — |
| ekz.de | April 22, 2022 | ransomware_live | — |
| produitsneptune... | April 22, 2022 | ransomware_live | — |
| lifestylesoluti... | April 22, 2022 | ransomware_live | — |
| fazenda.rj.gov.... | April 22, 2022 | ransomware_live | — |
| simplilearn.net | April 22, 2022 | ransomware_live | — |
| breadt | April 21, 2022 | ransomware_live | — |
| asp.messina.it | April 21, 2022 | ransomware_live | — |
| tvothai.com | April 21, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).