BreachCensus

lockbit2

First seen September 9, 2021Active1,002 claimed victims

The claims below are reproduced as posted by lockbit2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
hsisensing.comDecember 14, 2021ransomware_live—
masselin.comDecember 11, 2021ransomware_live—
rbauction.comDecember 11, 2021ransomware_live—
robroelaw.comDecember 10, 2021ransomware_live—
tamerholding.co...December 10, 2021ransomware_live—
pacifichills.co...December 9, 2021ransomware_live—
g1group.co.ukDecember 9, 2021ransomware_live—
proximitysystem...December 9, 2021ransomware_live—
apexbrasil.com....December 9, 2021ransomware_live—
inperium.orgDecember 9, 2021ransomware_live—
northstarice.co...December 9, 2021ransomware_live—
clubpilates.comDecember 9, 2021ransomware_live—
kssenterprises....December 9, 2021ransomware_live—
bsm.upf.eduDecember 9, 2021ransomware_live—
mswood.baDecember 9, 2021ransomware_live—
continuumenergy...December 9, 2021ransomware_live—
ducab.comDecember 9, 2021ransomware_live—
volkswind.deDecember 9, 2021ransomware_live—
se.comDecember 9, 2021ransomware_live—
comark.caDecember 8, 2021ransomware_live—
fr.shop-orchest...December 8, 2021ransomware_live—
hp.icon-institu...December 8, 2021ransomware_live—
kerrylogistics....December 8, 2021ransomware_live—
caudillseed.comDecember 8, 2021ransomware_live—
ytlcement.comDecember 8, 2021ransomware_live—
vestas.comDecember 8, 2021ransomware_live—
prairiesedgecas...December 8, 2021ransomware_live—
murrayscheese.c...December 8, 2021ransomware_live—
psmportraits.co...December 8, 2021ransomware_live—
atlas.inDecember 8, 2021ransomware_live—
nowiny.plDecember 8, 2021ransomware_live—
roemer-lueftung...December 8, 2021ransomware_live—
mainstreamdata....December 2, 2021ransomware_live—
travel-general....December 2, 2021ransomware_live—
summit-christia...December 1, 2021ransomware_live—
kenwal.comNovember 30, 2021ransomware_live—
dlb.itNovember 29, 2021ransomware_live—
callay.com.trNovember 29, 2021ransomware_live—
totalfire.bizNovember 29, 2021ransomware_live—
nextech-asia.co...November 27, 2021ransomware_live—
hsvgroup.talent...November 27, 2021ransomware_live—
effectual.comNovember 27, 2021ransomware_live—
telepro.com.mxNovember 27, 2021ransomware_live—
inlad.comNovember 26, 2021ransomware_live—
lenzcontractors...November 26, 2021ransomware_live—
mpusd.netNovember 25, 2021ransomware_live—
IVEQI.ComNovember 25, 2021ransomware_live—
ardebolassessor...November 25, 2021ransomware_live—
vicksburgha.orgNovember 25, 2021ransomware_live—
jurelus.deNovember 24, 2021ransomware_live—
lawrencegroup.n...November 24, 2021ransomware_live—
atlas.ind.brNovember 24, 2021ransomware_live—
centerspacehome...November 23, 2021ransomware_live—
mtradeasia.comNovember 23, 2021ransomware_live—
mecfond.comNovember 22, 2021ransomware_live—
roteritaly.comNovember 22, 2021ransomware_live—
wnrllc.comNovember 22, 2021ransomware_live—
kankakeetitle.c...November 22, 2021ransomware_live—
planters-oil.ne...November 22, 2021ransomware_live—
fluidsealingpro...November 22, 2021ransomware_live—
consortiumlegal...November 21, 2021ransomware_live—
evans.co.idNovember 21, 2021ransomware_live—
telemovil.com.s...November 21, 2021ransomware_live—
siix.co.jpNovember 21, 2021ransomware_live—
systematicatec....November 21, 2021ransomware_live—
apower.com.sgNovember 20, 2021ransomware_live—
duncandisabilit...November 19, 2021ransomware_live—
a1ssi.comNovember 19, 2021ransomware_live—
royole.comNovember 17, 2021ransomware_live—
btc-alpha.comNovember 17, 2021ransomware_live—
reiss-beck.deNovember 17, 2021ransomware_live—
peschl-ultravio...November 17, 2021ransomware_live—
hanshin-dp.co.j...November 17, 2021ransomware_live—
ipbridge.co.jpNovember 17, 2021ransomware_live—
pkf.com.auNovember 16, 2021ransomware_live—
essextec.comNovember 16, 2021ransomware_live—
cloudpros.comNovember 15, 2021ransomware_live—
mfitexas.comNovember 13, 2021ransomware_live—
era.org.ukNovember 13, 2021ransomware_live—
rintal.comNovember 12, 2021ransomware_live—
http://bsg-llp....November 12, 2021ransomware_live—
barfieldinc.comNovember 12, 2021ransomware_live—
bsg-llp.comNovember 12, 2021ransomware_live—
thinkcaspian.co...November 10, 2021ransomware_live—
comfacundi.com....November 10, 2021ransomware_live—
cardigos.comNovember 10, 2021ransomware_live—
home.hktdc.comNovember 10, 2021ransomware_live—
ideaitaliausa.c...November 10, 2021ransomware_live—
daviscrump.comNovember 10, 2021ransomware_live—
evolvedevelopme...November 9, 2021ransomware_live—
gunninglafazia....November 9, 2021ransomware_live—
transaher.es Pa...November 9, 2021ransomware_live—
abvalve.comNovember 9, 2021ransomware_live—
breslowstarling...November 9, 2021ransomware_live—
betsaisonparago...November 9, 2021ransomware_live—
abiom.nlNovember 8, 2021ransomware_live—
cool-pak.comNovember 8, 2021ransomware_live—
chatrium.comNovember 7, 2021ransomware_live—
Royale.co.ukNovember 7, 2021ransomware_live—
eberlesrl.comNovember 7, 2021ransomware_live—
← NewerPage 7 of 11Older →

Claim data from ransomware.live and RansomLook (CC BY 4.0).