lockbit2
First seen September 9, 2021Active1,002 claimed victims
The claims below are reproduced as posted by lockbit2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| bcad.org | March 30, 2022 | ransomware_live | — |
| botswana | March 30, 2022 | ransomware_live | — |
| burlingtonsafet... | March 30, 2022 | ransomware_live | — |
| papierswhitebi | March 30, 2022 | ransomware_live | — |
| jlmsolicitors.c... | March 30, 2022 | ransomware_live | — |
| grupodeincendio... | March 30, 2022 | ransomware_live | — |
| avcimmedia.com | March 30, 2022 | ransomware_live | — |
| axessa.ch | March 29, 2022 | ransomware_live | — |
| zentrum-dreilin... | March 28, 2022 | ransomware_live | — |
| qarch.nl | March 28, 2022 | ransomware_live | — |
| its.ws | March 28, 2022 | ransomware_live | — |
| bro | March 28, 2022 | ransomware_live | — |
| progettoedilesr... | March 28, 2022 | ransomware_live | — |
| comune.g | March 27, 2022 | ransomware_live | — |
| girlguidingl | March 27, 2022 | ransomware_live | — |
| https://pirsonh... | March 27, 2022 | ransomware_live | — |
| pirsonholland.c... | March 27, 2022 | ransomware_live | — |
| microflex-servi... | March 26, 2022 | ransomware_live | — |
| aquazzura.co | March 26, 2022 | ransomware_live | — |
| aquazzura. | March 26, 2022 | ransomware_live | — |
| alaliengineerin... | March 25, 2022 | ransomware_live | — |
| standard-furnit... | March 25, 2022 | ransomware_live | — |
| https://century... | March 25, 2022 | ransomware_live | — |
| ctigas.com | March 25, 2022 | ransomware_live | — |
| centuryaluminum... | March 25, 2022 | ransomware_live | — |
| intouchgroup.ne... | March 24, 2022 | ransomware_live | — |
| redgwick.com | March 24, 2022 | ransomware_live | — |
| ignitarium.com | March 24, 2022 | ransomware_live | — |
| serilization-se... | March 24, 2022 | ransomware_live | — |
| japoauto.com | March 24, 2022 | ransomware_live | — |
| guazzini.it | March 24, 2022 | ransomware_live | — |
| stt-logistique.... | March 24, 2022 | ransomware_live | — |
| onedoc.ch/fr/ce... | March 24, 2022 | ransomware_live | — |
| buffingtonl | March 24, 2022 | ransomware_live | — |
| lazpiur.com | March 23, 2022 | ransomware_live | — |
| avidoc.fr | March 23, 2022 | ransomware_live | — |
| crich.it | March 23, 2022 | ransomware_live | — |
| confindustriaca... | March 23, 2022 | ransomware_live | — |
| credenceid.com | March 23, 2022 | ransomware_live | — |
| apec-capital.co... | March 22, 2022 | ransomware_live | — |
| ca.daiyafoods.c... | March 22, 2022 | ransomware_live | — |
| edukgroup.com | March 22, 2022 | ransomware_live | — |
| besp-oak.com | March 21, 2022 | ransomware_live | — |
| onglesdor.com | March 21, 2022 | ransomware_live | — |
| rh-europe.com | March 21, 2022 | ransomware_live | — |
| STUDIO PEREGO S... | March 21, 2022 | ransomware_live | — |
| zabel-group.de | March 21, 2022 | ransomware_live | — |
| chicagosteelgro... | March 21, 2022 | ransomware_live | — |
| tomlinsonelectr... | March 21, 2022 | ransomware_live | — |
| ismea.it | March 21, 2022 | ransomware_live | — |
| sete.co.u | March 21, 2022 | ransomware_live | — |
| connectcec.com | March 20, 2022 | ransomware_live | — |
| danubius-exim.r... | March 20, 2022 | ransomware_live | — |
| meritresources | March 20, 2022 | ransomware_live | — |
| museum-dingolfi... | March 20, 2022 | ransomware_live | — |
| bbst-clp.de | March 20, 2022 | ransomware_live | — |
| jewelry.org.hk | March 19, 2022 | ransomware_live | — |
| denro.ca | March 19, 2022 | ransomware_live | — |
| pla-pumpen | March 19, 2022 | ransomware_live | — |
| montanarisrl.ne... | March 18, 2022 | ransomware_live | — |
| thionvillenola.... | March 18, 2022 | ransomware_live | — |
| ifis.com.sg | March 18, 2022 | ransomware_live | — |
| gezairi.com | March 18, 2022 | ransomware_live | — |
| www.centralacci... | March 18, 2022 | ransomware_live | — |
| draftex.de | March 18, 2022 | ransomware_live | — |
| genesis.ky | March 18, 2022 | ransomware_live | — |
| kbkbcpa.com | March 18, 2022 | ransomware_live | — |
| solvi.com | March 18, 2022 | ransomware_live | — |
| megaproductos.c... | March 18, 2022 | ransomware_live | — |
| centralaccident... | March 18, 2022 | ransomware_live | — |
| dgordonlcswr.co... | March 18, 2022 | ransomware_live | — |
| comune.villafra... | March 17, 2022 | ransomware_live | — |
| onedoc.ch/fr/ca... | March 17, 2022 | ransomware_live | — |
| rebuildingtoget... | March 17, 2022 | ransomware_live | — |
| www.onedoc.ch/f... | March 17, 2022 | ransomware_live | — |
| vvrmc.org | Par... | March 17, 2022 | ransomware_live | — |
| sbctanzania.co.... | March 17, 2022 | ransomware_live | — |
| rosslare.com.hk | March 17, 2022 | ransomware_live | — |
| ihg.com | March 17, 2022 | ransomware_live | — |
| lawsdn.com | March 17, 2022 | ransomware_live | — |
| specialinc.com | March 17, 2022 | ransomware_live | — |
| aetnabridge.com | March 17, 2022 | ransomware_live | — |
| hilltopconstruc... | March 17, 2022 | ransomware_live | — |
| finances.gouv.c... | March 17, 2022 | ransomware_live | — |
| medinadairy.co.... | March 16, 2022 | ransomware_live | — |
| vbsharma.ca | March 16, 2022 | ransomware_live | — |
| matteolisrl.it | March 16, 2022 | ransomware_live | — |
| www.rebuildingt... | March 16, 2022 | ransomware_live | — |
| www.comune.vill... | March 16, 2022 | ransomware_live | — |
| taguefamilyprac... | March 16, 2022 | ransomware_live | — |
| drory.com.cn | March 16, 2022 | ransomware_live | — |
| f | March 15, 2022 | ransomware_live | — |
| mfi | March 15, 2022 | ransomware_live | — |
| snteseccion30sa.. | March 14, 2022 | ransomware_live | — |
| scanvogn.com | March 13, 2022 | ransomware_live | — |
| ikk-group.com | March 13, 2022 | ransomware_live | — |
| ambujaneotia.co... | March 13, 2022 | ransomware_live | — |
| danubiushotels.... | March 13, 2022 | ransomware_live | — |
| etrps.de | March 13, 2022 | ransomware_live | — |
| ymcad | March 12, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).