BreachCensus

lockbit2

First seen September 9, 2021Active1,002 claimed victims

The claims below are reproduced as posted by lockbit2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
plumascounty.usNovember 6, 2021ransomware_live—
waclighting.comNovember 6, 2021ransomware_live—
waveridernurser...November 6, 2021ransomware_live—
cepimanagement....November 6, 2021ransomware_live—
logistia.comNovember 6, 2021ransomware_live—
fandi.frNovember 6, 2021ransomware_live—
arrowheadadvanc...November 6, 2021ransomware_live—
optimumdesign.c...November 6, 2021ransomware_live—
mym.com.peNovember 6, 2021ransomware_live—
trueblueenviron...November 6, 2021ransomware_live—
owenscarolina.c...November 6, 2021ransomware_live—
mcmanislaw.comNovember 6, 2021ransomware_live—
interfor.comNovember 6, 2021ransomware_live—
rttax.comNovember 6, 2021ransomware_live—
besttaxfiler.co...November 6, 2021ransomware_live—
autolaundrysyst...November 6, 2021ransomware_live—
cilentospa.itNovember 6, 2021ransomware_live—
eban.comNovember 6, 2021ransomware_live—
nurihiko.co.jpNovember 6, 2021ransomware_live—
groweeisen.comNovember 4, 2021ransomware_live—
dtstechnical.caNovember 2, 2021ransomware_live—
wpdn.netNovember 2, 2021ransomware_live—
gvalue.comNovember 2, 2021ransomware_live—
tornel.com.mxNovember 2, 2021ransomware_live—
www.radium.com....November 1, 2021ransomware_live—
promo.parker.co...November 1, 2021ransomware_live—
comune.gonzaga....November 1, 2021ransomware_live—
https://gvalue....November 1, 2021ransomware_live—
morganskenderia...November 1, 2021ransomware_live—
bdtaid.comNovember 1, 2021ransomware_live—
immodelaet.beNovember 1, 2021ransomware_live—
logcabinhomes.c...October 31, 2021ransomware_live—
logi-cv.comOctober 30, 2021ransomware_live—
rijeka-airport....October 29, 2021ransomware_live—
movingstation.c...October 28, 2021ransomware_live—
www.psomagen.co...October 28, 2021ransomware_live—
stehimpuls.deOctober 28, 2021ransomware_live—
www.parkhotel.m...October 28, 2021ransomware_live—
pandol.comOctober 28, 2021ransomware_live—
katzmanproduce....October 28, 2021ransomware_live—
roadrebel.comOctober 28, 2021ransomware_live—
parkhotel.mkOctober 28, 2021ransomware_live—
psomagen.comOctober 28, 2021ransomware_live—
amina-treuhand....October 28, 2021ransomware_live—
lawyersforemplo...October 27, 2021ransomware_live—
tedia.comOctober 27, 2021ransomware_live—
http://www.movi...October 27, 2021ransomware_live—
laserexcel.comOctober 26, 2021ransomware_live—
https://ville-s...October 26, 2021ransomware_live—
dunndev.comOctober 26, 2021ransomware_live—
idline.frOctober 26, 2021ransomware_live—
le-inc.comOctober 26, 2021ransomware_live—
ville-saintaffr...October 26, 2021ransomware_live—
https://www.med...October 25, 2021ransomware_live—
https://www.cti...October 25, 2021ransomware_live—
deleteOctober 25, 2021ransomware_live—
cti.groupOctober 25, 2021ransomware_live—
mediacrush.co.i...October 25, 2021ransomware_live—
rockportmusic.o...October 24, 2021ransomware_live—
galaxybuilders....October 24, 2021ransomware_live—
madejwrobel.plOctober 23, 2021ransomware_live—
www.datastorage...October 22, 2021ransomware_live—
selinigroup.itOctober 22, 2021ransomware_live—
wnj.comOctober 22, 2021ransomware_live—
srstlaw.comOctober 22, 2021ransomware_live—
datastorageip.c...October 22, 2021ransomware_live—
www.continental...October 21, 2021ransomware_live—
https://www.gro...October 21, 2021ransomware_live—
https://www.mer...October 21, 2021ransomware_live—
https://www.pea...October 21, 2021ransomware_live—
bataviacontaine...October 21, 2021ransomware_live—
radium.com.twOctober 21, 2021ransomware_live—
groeflinag.chOctober 21, 2021ransomware_live—
meritresources....October 21, 2021ransomware_live—
continentalcoun...October 21, 2021ransomware_live—
urbis.com.hkOctober 21, 2021ransomware_live—
zgoda.netOctober 20, 2021ransomware_live—
thefoxhillclub....October 20, 2021ransomware_live—
atento.comOctober 18, 2021ransomware_live—
ferrolabella.co...October 17, 2021ransomware_live—
uslogic.comOctober 16, 2021ransomware_live—
valleyregionalt...October 16, 2021ransomware_live—
espera.comOctober 16, 2021ransomware_live—
cassini-technol...October 16, 2021ransomware_live—
alwatania.saOctober 15, 2021ransomware_live—
wataniaind.comOctober 15, 2021ransomware_live—
uvisionuav.comOctober 15, 2021ransomware_live—
wmlaw.com.auOctober 15, 2021ransomware_live—
sb-kc.comOctober 15, 2021ransomware_live—
hitrac-engineer...October 13, 2021ransomware_live—
wolfbergalvarez...October 13, 2021ransomware_live—
riversidetwp.or...October 12, 2021ransomware_live—
ceraOctober 12, 2021ransomware_live—
planitox.com.brOctober 12, 2021ransomware_live—
ceoempowers.orgOctober 10, 2021ransomware_live—
hybuilding.com....October 10, 2021ransomware_live—
nofeurope.comOctober 10, 2021ransomware_live—
watermarkbeachr...October 9, 2021ransomware_live—
aisc-airbus.comOctober 9, 2021ransomware_live—
weber-betonpump...October 9, 2021ransomware_live—
← NewerPage 8 of 11Older →

Claim data from ransomware.live and RansomLook (CC BY 4.0).