lockbit2
First seen September 9, 2021Active1,002 claimed victims
The claims below are reproduced as posted by lockbit2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| aisc-airbus. | February 5, 2022 | ransomware_live | — |
| kainz-haustechn... | February 5, 2022 | ransomware_live | — |
| tyresolesdobras... | February 5, 2022 | ransomware_live | — |
| udmercy.edu | February 4, 2022 | ransomware_live | — |
| fivestarproduct... | February 4, 2022 | ransomware_live | — |
| nfcaa.org | February 4, 2022 | ransomware_live | — |
| siamdial.com | February 4, 2022 | ransomware_live | — |
| Ourense do Bras... | February 4, 2022 | ransomware_live | — |
| rabba | February 4, 2022 | ransomware_live | — |
| savonia.fi | February 4, 2022 | ransomware_live | — |
| dectro.com | February 4, 2022 | ransomware_live | — |
| ukrl.co.uk | February 4, 2022 | ransomware_live | — |
| ametisfacilitie... | February 4, 2022 | ransomware_live | — |
| bar2.co.uk | February 4, 2022 | ransomware_live | — |
| maisonlaprise.c. | February 4, 2022 | ransomware_live | — |
| hotelcedres.com | February 4, 2022 | ransomware_live | — |
| cometgroup | February 4, 2022 | ransomware_live | — |
| castro-urdiales... | February 4, 2022 | ransomware_live | — |
| progereal.com | February 4, 2022 | ransomware_live | — |
| COFRAP ESPAÑOLA... | February 4, 2022 | ransomware_live | — |
| prefimetal.com | February 4, 2022 | ransomware_live | — |
| botafogo.ind.br | February 4, 2022 | ransomware_live | — |
| paybito.com | February 3, 2022 | ransomware_live | — |
| wolfbergal | February 2, 2022 | ransomware_live | — |
| ci.hercules.ca.... | February 1, 2022 | ransomware_live | — |
| optimissa.com | January 27, 2022 | ransomware_live | — |
| isnardi.it | January 27, 2022 | ransomware_live | — |
| vbhlaw.com | January 27, 2022 | ransomware_live | — |
| laponte.it | January 27, 2022 | ransomware_live | — |
| ambau-team.de | January 27, 2022 | ransomware_live | — |
| joda.de | January 27, 2022 | ransomware_live | — |
| saintcloud.fr | January 27, 2022 | ransomware_live | — |
| heubeck.de | January 27, 2022 | ransomware_live | — |
| justice.fr | January 27, 2022 | ransomware_live | — |
| girlguidinglase... | January 27, 2022 | ransomware_live | — |
| estpm.fr | January 27, 2022 | ransomware_live | — |
| elmonterv.com | January 27, 2022 | ransomware_live | — |
| plainviewmn.com | January 25, 2022 | ransomware_live | — |
| kentkonut.com.t... | January 24, 2022 | ransomware_live | — |
| mfkmakina.com | January 24, 2022 | ransomware_live | — |
| bagbyelevator.c... | January 23, 2022 | ransomware_live | — |
| peabo | January 23, 2022 | ransomware_live | — |
| r | January 22, 2022 | ransomware_live | — |
| efile.com | January 21, 2022 | ransomware_live | — |
| onlinesalespro.... | January 21, 2022 | ransomware_live | — |
| roemer-lueftung. | January 20, 2022 | ransomware_live | — |
| bayview.com | January 20, 2022 | ransomware_live | — |
| ged | January 20, 2022 | ransomware_live | — |
| izo.es | January 19, 2022 | ransomware_live | — |
| harrisshelton.c... | January 19, 2022 | ransomware_live | — |
| huntsville4rent... | January 18, 2022 | ransomware_live | — |
| bannerbuzz.com | January 18, 2022 | ransomware_live | — |
| centralbankfl.c... | January 16, 2022 | ransomware_live | — |
| fairnessforall.... | January 15, 2022 | ransomware_live | — |
| khattarlaw.com | January 15, 2022 | ransomware_live | — |
| supersave.ca | January 12, 2022 | ransomware_live | — |
| securiteassuran... | January 10, 2022 | ransomware_live | — |
| torann-france.f... | January 10, 2022 | ransomware_live | — |
| amerplumb.com | January 10, 2022 | ransomware_live | — |
| bernheim.org | January 10, 2022 | ransomware_live | — |
| northsideplumbi... | January 10, 2022 | ransomware_live | — |
| owenscaroli | January 8, 2022 | ransomware_live | — |
| giovanardi.it | January 8, 2022 | ransomware_live | — |
| focusadventure.... | January 8, 2022 | ransomware_live | — |
| salesiancollege... | January 7, 2022 | ransomware_live | — |
| cbibanks.com | January 7, 2022 | ransomware_live | — |
| chervongroup.co... | January 7, 2022 | ransomware_live | — |
| mcsmorandi.com | January 7, 2022 | ransomware_live | — |
| bricofer.it | January 5, 2022 | ransomware_live | — |
| atsair.com | January 4, 2022 | ransomware_live | — |
| thalesgroup.com | January 3, 2022 | ransomware_live | — |
| aulss6.veneto.i... | January 1, 2022 | ransomware_live | — |
| empireins.com | January 1, 2022 | ransomware_live | — |
| lee-associates.... | December 31, 2021 | ransomware_live | — |
| grupomakler.com | December 30, 2021 | ransomware_live | — |
| rightsys.com | December 30, 2021 | ransomware_live | — |
| https://www.lee... | December 30, 2021 | ransomware_live | — |
| independentprin... | December 30, 2021 | ransomware_live | — |
| cgm.com | December 25, 2021 | ransomware_live | — |
| riverhead.net | December 25, 2021 | ransomware_live | — |
| smiimaging.com | December 25, 2021 | ransomware_live | — |
| cbjblawfirm.com | December 24, 2021 | ransomware_live | — |
| sintesiautomoti... | December 24, 2021 | ransomware_live | — |
| lozzaspa.it | December 24, 2021 | ransomware_live | — |
| burgsimpson.com | December 23, 2021 | ransomware_live | — |
| pestbusters.com... | December 22, 2021 | ransomware_live | — |
| atskorea.co.kr | December 22, 2021 | ransomware_live | — |
| urbandevelop.co... | December 21, 2021 | ransomware_live | — |
| piolax.co.th | December 21, 2021 | ransomware_live | — |
| dcashpro.com | December 21, 2021 | ransomware_live | — |
| lipinskilogging... | December 21, 2021 | ransomware_live | — |
| www.maibroker.c... | December 21, 2021 | ransomware_live | — |
| maibroker.com | December 21, 2021 | ransomware_live | — |
| www.hajery.com | December 21, 2021 | ransomware_live | — |
| hajery.com | December 21, 2021 | ransomware_live | — |
| skinnertrans.co... | December 18, 2021 | ransomware_live | — |
| baa.legal | December 18, 2021 | ransomware_live | — |
| cunninghamgolfc... | December 18, 2021 | ransomware_live | — |
| vipsmotel.it | December 15, 2021 | ransomware_live | — |
| boxmarche.it | December 15, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).