BreachCensus

lockbit2

First seen September 9, 2021Active1,002 claimed victims

The claims below are reproduced as posted by lockbit2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
orientalaromati...March 12, 2022ransomware_live
cachibi.coMarch 12, 2022ransomware_live
etg.digitalMarch 12, 2022ransomware_live
snteseccion30sa...March 12, 2022ransomware_live
tingtong.com.cnMarch 11, 2022ransomware_live
weber-betonpump..March 11, 2022ransomware_live
sysmac.com.sgMarch 11, 2022ransomware_live
ferMarch 10, 2022ransomware_live
bioskin.sgMarch 10, 2022ransomware_live
bridgestoneamer...March 9, 2022ransomware_live
hammMarch 8, 2022ransomware_live
luzeirosfortale.March 7, 2022ransomware_live
brownsville-pub...March 7, 2022ransomware_live
jrichard-paysag...March 7, 2022ransomware_live
stanthonys.slou...March 7, 2022ransomware_live
abcp.orMarch 5, 2022ransomware_live
tovogomMarch 4, 2022ransomware_live
freedomfarmspa....March 4, 2022ransomware_live
sapulpaps.orgMarch 3, 2022ransomware_live
simatelex.com.h...March 3, 2022ransomware_live
www.wimmog.chMarch 2, 2022ransomware_live
www.elitecorp.c...March 2, 2022ransomware_live
www.haeny.comMarch 2, 2022ransomware_live
www.tccm.comMarch 2, 2022ransomware_live
elitecorp.comMarch 2, 2022ransomware_live
haeny.comMarch 2, 2022ransomware_live
wimmog.chMarch 2, 2022ransomware_live
tccm.comMarch 2, 2022ransomware_live
e-fmc.com.arMarch 1, 2022ransomware_live
wpMarch 1, 2022ransomware_live
jamailsmith.comFebruary 28, 2022ransomware_live
safed.inFebruary 28, 2022ransomware_live
ccliFebruary 28, 2022ransomware_live
ffnm.orgFebruary 27, 2022ransomware_live
cgmFebruary 27, 2022ransomware_live
WARNINGFebruary 27, 2022ransomware_live
ugcorp.comFebruary 27, 2022ransomware_live
us.jll.comFebruary 27, 2022ransomware_live
richmondmonroe....February 27, 2022ransomware_live
lakeview.comFebruary 27, 2022ransomware_live
giovanardFebruary 26, 2022ransomware_live
giovanaFebruary 26, 2022ransomware_live
chipFebruary 26, 2022ransomware_live
fehrs.comFebruary 25, 2022ransomware_live
verisilicon.coFebruary 24, 2022ransomware_live
mFebruary 24, 2022ransomware_live
dtstechnical.cFebruary 24, 2022ransomware_live
photolitto.comFebruary 23, 2022ransomware_live
komeg.deFebruary 23, 2022ransomware_live
trauma.lbg.ac.a...February 23, 2022ransomware_live
blueocean.consu...February 23, 2022ransomware_live
stetsonexpo.February 23, 2022ransomware_live
lipinskFebruary 23, 2022ransomware_live
gpvivienda.comFebruary 21, 2022ransomware_live
groupe-sobotram...February 21, 2022ransomware_live
bynx.comFebruary 20, 2022ransomware_live
weyeFebruary 20, 2022ransomware_live
botswanatourism...February 19, 2022ransomware_live
sanvitale.ra.itFebruary 19, 2022ransomware_live
kokuyocamlin.co...February 19, 2022ransomware_live
pertusipastore....February 19, 2022ransomware_live
centralia.eduFebruary 19, 2022ransomware_live
brookledge.comFebruary 19, 2022ransomware_live
oceantextile.dkFebruary 19, 2022ransomware_live
taylorswindows....February 19, 2022ransomware_live
asgcourtage.comFebruary 19, 2022ransomware_live
centrictel.comFebruary 19, 2022ransomware_live
plane.bizFebruary 19, 2022ransomware_live
strix.comFebruary 19, 2022ransomware_live
maldegem.beFebruary 19, 2022ransomware_live
partners.pia.beFebruary 19, 2022ransomware_live
enit.itFebruary 18, 2022ransomware_live
beautyindustryg...February 15, 2022ransomware_live
codisel.com.mxFebruary 15, 2022ransomware_live
trustinnews.ptFebruary 14, 2022ransomware_live
meeuwesen.nlFebruary 14, 2022ransomware_live
sienaliteracy.o...February 14, 2022ransomware_live
o2fit.clFebruary 14, 2022ransomware_live
ackmo.beFebruary 14, 2022ransomware_live
pwma.org.hkFebruary 14, 2022ransomware_live
hifly.aeroFebruary 14, 2022ransomware_live
iFebruary 13, 2022ransomware_live
zhulian.co.thFebruary 13, 2022ransomware_live
rbhltd.comFebruary 13, 2022ransomware_live
cclint.comFebruary 13, 2022ransomware_live
wingsoft.itFebruary 13, 2022ransomware_live
idm-srl.itFebruary 12, 2022ransomware_live
gruges.com.mxFebruary 12, 2022ransomware_live
ibasis.comFebruary 11, 2022ransomware_live
cilentFebruary 9, 2022ransomware_live
tntorello.com -...February 8, 2022ransomware_live
tntorello.comFebruary 8, 2022ransomware_live
skandia.com.mxFebruary 8, 2022ransomware_live
aludesign.roFebruary 8, 2022ransomware_live
ibasis.com | Pa...February 8, 2022ransomware_live
bayer.co.atFebruary 7, 2022ransomware_live
watermarkFebruary 6, 2022ransomware_live
se.February 6, 2022ransomware_live
sapulpaps.comFebruary 6, 2022ransomware_live
dap.gov.trFebruary 5, 2022ransomware_live
← NewerPage 5 of 11Older →

Claim data from ransomware.live and RansomLook (CC BY 4.0).