BreachCensus

lockbit2

First seen September 9, 2021Active1,002 claimed victims

The claims below are reproduced as posted by lockbit2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
orientalaromati...March 12, 2022ransomware_live—
cachibi.coMarch 12, 2022ransomware_live—
etg.digitalMarch 12, 2022ransomware_live—
snteseccion30sa...March 12, 2022ransomware_live—
tingtong.com.cnMarch 11, 2022ransomware_live—
weber-betonpump..March 11, 2022ransomware_live—
sysmac.com.sgMarch 11, 2022ransomware_live—
ferMarch 10, 2022ransomware_live—
bioskin.sgMarch 10, 2022ransomware_live—
bridgestoneamer...March 9, 2022ransomware_live—
hammMarch 8, 2022ransomware_live—
luzeirosfortale.March 7, 2022ransomware_live—
brownsville-pub...March 7, 2022ransomware_live—
jrichard-paysag...March 7, 2022ransomware_live—
stanthonys.slou...March 7, 2022ransomware_live—
abcp.orMarch 5, 2022ransomware_live—
tovogomMarch 4, 2022ransomware_live—
freedomfarmspa....March 4, 2022ransomware_live—
sapulpaps.orgMarch 3, 2022ransomware_live—
simatelex.com.h...March 3, 2022ransomware_live—
www.wimmog.chMarch 2, 2022ransomware_live—
www.elitecorp.c...March 2, 2022ransomware_live—
www.haeny.comMarch 2, 2022ransomware_live—
www.tccm.comMarch 2, 2022ransomware_live—
elitecorp.comMarch 2, 2022ransomware_live—
haeny.comMarch 2, 2022ransomware_live—
wimmog.chMarch 2, 2022ransomware_live—
tccm.comMarch 2, 2022ransomware_live—
e-fmc.com.arMarch 1, 2022ransomware_live—
wpMarch 1, 2022ransomware_live—
jamailsmith.comFebruary 28, 2022ransomware_live—
safed.inFebruary 28, 2022ransomware_live—
ccliFebruary 28, 2022ransomware_live—
ffnm.orgFebruary 27, 2022ransomware_live—
cgmFebruary 27, 2022ransomware_live—
WARNINGFebruary 27, 2022ransomware_live—
ugcorp.comFebruary 27, 2022ransomware_live—
us.jll.comFebruary 27, 2022ransomware_live—
richmondmonroe....February 27, 2022ransomware_live—
lakeview.comFebruary 27, 2022ransomware_live—
giovanardFebruary 26, 2022ransomware_live—
giovanaFebruary 26, 2022ransomware_live—
chipFebruary 26, 2022ransomware_live—
fehrs.comFebruary 25, 2022ransomware_live—
verisilicon.coFebruary 24, 2022ransomware_live—
mFebruary 24, 2022ransomware_live—
dtstechnical.cFebruary 24, 2022ransomware_live—
photolitto.comFebruary 23, 2022ransomware_live—
komeg.deFebruary 23, 2022ransomware_live—
trauma.lbg.ac.a...February 23, 2022ransomware_live—
blueocean.consu...February 23, 2022ransomware_live—
stetsonexpo.February 23, 2022ransomware_live—
lipinskFebruary 23, 2022ransomware_live—
gpvivienda.comFebruary 21, 2022ransomware_live—
groupe-sobotram...February 21, 2022ransomware_live—
bynx.comFebruary 20, 2022ransomware_live—
weyeFebruary 20, 2022ransomware_live—
botswanatourism...February 19, 2022ransomware_live—
sanvitale.ra.itFebruary 19, 2022ransomware_live—
kokuyocamlin.co...February 19, 2022ransomware_live—
pertusipastore....February 19, 2022ransomware_live—
centralia.eduFebruary 19, 2022ransomware_live—
brookledge.comFebruary 19, 2022ransomware_live—
oceantextile.dkFebruary 19, 2022ransomware_live—
taylorswindows....February 19, 2022ransomware_live—
asgcourtage.comFebruary 19, 2022ransomware_live—
centrictel.comFebruary 19, 2022ransomware_live—
plane.bizFebruary 19, 2022ransomware_live—
strix.comFebruary 19, 2022ransomware_live—
maldegem.beFebruary 19, 2022ransomware_live—
partners.pia.beFebruary 19, 2022ransomware_live—
enit.itFebruary 18, 2022ransomware_live—
beautyindustryg...February 15, 2022ransomware_live—
codisel.com.mxFebruary 15, 2022ransomware_live—
trustinnews.ptFebruary 14, 2022ransomware_live—
meeuwesen.nlFebruary 14, 2022ransomware_live—
sienaliteracy.o...February 14, 2022ransomware_live—
o2fit.clFebruary 14, 2022ransomware_live—
ackmo.beFebruary 14, 2022ransomware_live—
pwma.org.hkFebruary 14, 2022ransomware_live—
hifly.aeroFebruary 14, 2022ransomware_live—
iFebruary 13, 2022ransomware_live—
zhulian.co.thFebruary 13, 2022ransomware_live—
rbhltd.comFebruary 13, 2022ransomware_live—
cclint.comFebruary 13, 2022ransomware_live—
wingsoft.itFebruary 13, 2022ransomware_live—
idm-srl.itFebruary 12, 2022ransomware_live—
gruges.com.mxFebruary 12, 2022ransomware_live—
ibasis.comFebruary 11, 2022ransomware_live—
cilentFebruary 9, 2022ransomware_live—
tntorello.com -...February 8, 2022ransomware_live—
tntorello.comFebruary 8, 2022ransomware_live—
skandia.com.mxFebruary 8, 2022ransomware_live—
aludesign.roFebruary 8, 2022ransomware_live—
ibasis.com | Pa...February 8, 2022ransomware_live—
bayer.co.atFebruary 7, 2022ransomware_live—
watermarkFebruary 6, 2022ransomware_live—
se.February 6, 2022ransomware_live—
sapulpaps.comFebruary 6, 2022ransomware_live—
dap.gov.trFebruary 5, 2022ransomware_live—
← NewerPage 5 of 11Older →

Claim data from ransomware.live and RansomLook (CC BY 4.0).