lockbit2
First seen September 9, 2021Active1,002 claimed victims
The claims below are reproduced as posted by lockbit2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| dusa.com.ve | October 8, 2021 | ransomware_live | — |
| kacyumara.com.b... | October 7, 2021 | ransomware_live | — |
| isvo.it | October 7, 2021 | ransomware_live | — |
| reust.ch | October 7, 2021 | ransomware_live | — |
| weyers-architek... | October 7, 2021 | ransomware_live | — |
| generalplumbing... | October 7, 2021 | ransomware_live | — |
| atsgruppo.eu | October 7, 2021 | ransomware_live | — |
| sapphiredentalc... | October 7, 2021 | ransomware_live | — |
| jaykaltrading.c... | October 7, 2021 | ransomware_live | — |
| parkertide.com | October 7, 2021 | ransomware_live | — |
| cobabebrothers.... | October 7, 2021 | ransomware_live | — |
| sides.fr | October 6, 2021 | ransomware_live | — |
| https://barreau... | October 5, 2021 | ransomware_live | — |
| https://moonnur... | October 5, 2021 | ransomware_live | — |
| barreaudecharle... | October 5, 2021 | ransomware_live | — |
| moonnurseries.c... | October 5, 2021 | ransomware_live | — |
| maisonlaprise.c... | October 5, 2021 | ransomware_live | — |
| transdev.com | October 5, 2021 | ransomware_live | — |
| estampa.com.pa | October 3, 2021 | ransomware_live | — |
| aktieinvest.se | October 3, 2021 | ransomware_live | — |
| nuevomundosa.co... | October 3, 2021 | ransomware_live | — |
| rivercityrental... | October 3, 2021 | ransomware_live | — |
| yankey.com.tw | October 2, 2021 | ransomware_live | — |
| dcaa.gov.ae | October 2, 2021 | ransomware_live | — |
| wormingtonlegal... | October 2, 2021 | ransomware_live | — |
| riviana.com | October 2, 2021 | ransomware_live | — |
| houstonestatepl... | October 1, 2021 | ransomware_live | — |
| brident.com/en-... | October 1, 2021 | ransomware_live | — |
| chipsaway.at | October 1, 2021 | ransomware_live | — |
| E.M.I.T. Aviati... | October 1, 2021 | ransomware_live | — |
| adlinktech.com | October 1, 2021 | ransomware_live | — |
| geda-produkte.d... | September 30, 2021 | ransomware_live | — |
| transrendufense... | September 30, 2021 | ransomware_live | — |
| texasacehvac.co... | September 30, 2021 | ransomware_live | — |
| nitropiso.com.m... | September 30, 2021 | ransomware_live | — |
| fugybat.fr | September 30, 2021 | ransomware_live | — |
| newhotel.com | September 30, 2021 | ransomware_live | — |
| rabbalshedekraf... | September 29, 2021 | ransomware_live | — |
| sheraton.marrio... | September 29, 2021 | ransomware_live | — |
| amista.cz | September 29, 2021 | ransomware_live | — |
| USA company | September 28, 2021 | ransomware_live | — |
| vlastuin.nl | September 28, 2021 | ransomware_live | — |
| anasia.com | September 28, 2021 | ransomware_live | — |
| https://www.wor... | September 28, 2021 | ransomware_live | — |
| alderking.com | September 28, 2021 | ransomware_live | — |
| wortmann.de | September 28, 2021 | ransomware_live | — |
| hoistcrane.com | September 28, 2021 | ransomware_live | — |
| iibg.ca | September 26, 2021 | ransomware_live | — |
| dataspeed.it | September 25, 2021 | ransomware_live | — |
| peabodyproperti... | September 25, 2021 | ransomware_live | — |
| advantecmfs.com | September 25, 2021 | ransomware_live | — |
| scisairsecurity... | September 25, 2021 | ransomware_live | — |
| papierswhitebir... | September 24, 2021 | ransomware_live | — |
| franklinempire.... | September 24, 2021 | ransomware_live | — |
| jaylon.com.au | September 24, 2021 | ransomware_live | — |
| tes-amm.com | September 23, 2021 | ransomware_live | — |
| robsonstreet.ca | September 23, 2021 | ransomware_live | — |
| https://www.buf... | September 23, 2021 | ransomware_live | — |
| www.daylewis.co... | September 23, 2021 | ransomware_live | — |
| sete.co.uk | September 23, 2021 | ransomware_live | — |
| buffingtonlawfi... | September 23, 2021 | ransomware_live | — |
| daylewis.co.uk | September 23, 2021 | ransomware_live | — |
| j-addington.com | September 22, 2021 | ransomware_live | — |
| shop.jerryleigh... | September 22, 2021 | ransomware_live | — |
| ebarc.adv.br | September 22, 2021 | ransomware_live | — |
| wijnendeclerck.... | September 22, 2021 | ransomware_live | — |
| hoffsuemmer.de | September 22, 2021 | ransomware_live | — |
| esopro.com | September 22, 2021 | ransomware_live | — |
| drhrlaw.com | September 22, 2021 | ransomware_live | — |
| hotelservicepro... | September 22, 2021 | ransomware_live | — |
| jplegal.net | September 22, 2021 | ransomware_live | — |
| grupowec.com | September 20, 2021 | ransomware_live | — |
| ibes-gmbh.de | September 20, 2021 | ransomware_live | — |
| dykman.com | September 20, 2021 | ransomware_live | — |
| glenroy.com | September 20, 2021 | ransomware_live | — |
| noone.com.au | September 20, 2021 | ransomware_live | — |
| westernspirits.... | September 20, 2021 | ransomware_live | — |
| drsdoors.com | September 20, 2021 | ransomware_live | — |
| iiservz.com | September 20, 2021 | ransomware_live | — |
| marriott.com/ho... | September 20, 2021 | ransomware_live | — |
| ds.net.au | September 20, 2021 | ransomware_live | — |
| johncockerillin... | September 20, 2021 | ransomware_live | — |
| 51talk.com | September 19, 2021 | ransomware_live | — |
| denark.com | September 19, 2021 | ransomware_live | — |
| nrpa.org | September 18, 2021 | ransomware_live | — |
| abcp.org.br | September 18, 2021 | ransomware_live | — |
| agmfinancial.co... | September 18, 2021 | ransomware_live | — |
| novotech.com | September 18, 2021 | ransomware_live | — |
| northstarak.com | September 18, 2021 | ransomware_live | — |
| coldwellbankerh... | September 17, 2021 | ransomware_live | — |
| mitchellsternla... | September 17, 2021 | ransomware_live | — |
| riscossa.it | September 17, 2021 | ransomware_live | — |
| cimico.net | September 13, 2021 | ransomware_live | — |
| rlsblaw.com | September 13, 2021 | ransomware_live | — |
| atstrack.com | September 13, 2021 | ransomware_live | — |
| miller-rose.com | September 13, 2021 | ransomware_live | — |
| https://cimico.... | September 12, 2021 | ransomware_live | — |
| tovogomma.it | September 10, 2021 | ransomware_live | — |
| royalporcelain.... | September 10, 2021 | ransomware_live | — |
| suenco.co.th | September 10, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).