BreachCensus

lockbit3

First seen June 29, 2022Active2,016 claimed victims

The claims below are reproduced as posted by lockbit3 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

LockBit, also recognized as LockBit Black or Lockbit 3.0, is one of the largest Ransomware Groups in the world and has orchestrated extensive cyberattacks across various industries, impacting thousands of organizations globally with its relentless and adaptive strategies.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
new blog domain lockbit 5.0December 5, 2025ransomware_live—
pdcm.comApril 28, 2025ransomware_live—
kll-law.comApril 22, 2025ransomware_live—
ehlers-inc.comApril 16, 2025ransomware_live—
aqhch.com.cnApril 12, 2025ransomware_live—
crystal-d.comApril 8, 2025ransomware_live—
graphiquedefrance.comApril 6, 2025ransomware_live—
asiapacificex.comApril 6, 2025ransomware_live—
visionproducts.llcApril 6, 2025ransomware_live—
ende.boApril 4, 2025ransomware_live—
tuttoperlufficio.euApril 4, 2025ransomware_live—
intelliloan.comApril 3, 2025ransomware_live—
physiciansmedicalbilling.netMarch 31, 2025ransomware_live—
aeamg.org.brMarch 31, 2025ransomware_live—
jackpotjunction.comMarch 31, 2025ransomware_live—
hennessyfunds.comMarch 30, 2025ransomware_live—
bioclimaservice.itMarch 15, 2025ransomware_live—
grupotersa.com.mxMarch 15, 2025ransomware_live—
acimfunds.comMarch 9, 2025ransomware_live—
fepasa.com.arMarch 7, 2025ransomware_live—
ossc.mxFebruary 25, 2025ransomware_live—
unila.edu.mxFebruary 11, 2025ransomware_live—
essenzamovies.com.brFebruary 7, 2025ransomware_live—
gruppocogesi.orgFebruary 4, 2025ransomware_live—
51talk.comJanuary 30, 2025ransomware_live—
abcapital.com.phJanuary 24, 2025ransomware_live—
topackt.comJanuary 23, 2025ransomware_live—
ossc.com.mxJanuary 19, 2025ransomware_live—
gruppozaccaria.itJanuary 17, 2025ransomware_live—
telering.deJanuary 13, 2025ransomware_live—
oyolasvegas.comJanuary 9, 2025ransomware_live—
tsebrakes.comDecember 23, 2024ransomware_live—
nicatel.com.uyDecember 21, 2024ransomware_live—
viacaojacarei.com.brDecember 21, 2024ransomware_live—
9fsfalcons.orgDecember 19, 2024ransomware_live—
lamejor.com.coDecember 18, 2024ransomware_live—
marmon-herrington.comDecember 13, 2024ransomware_live—
jtu.com.brDecember 10, 2024ransomware_live—
pittman-construction.comDecember 8, 2024ransomware_live—
gelco-s-a.com.brDecember 7, 2024ransomware_live—
candelasyasociados.esNovember 30, 2024ransomware_live—
atpformosa.gob.arNovember 29, 2024ransomware_live—
usuhs.eduNovember 26, 2024ransomware_live—
acwlaw.comNovember 22, 2024ransomware_live—
copral.com.brNovember 14, 2024ransomware_live—
ahn.orgNovember 13, 2024ransomware_live—
madison-home.comOctober 30, 2024ransomware_live—
habeshacement.comOctober 9, 2024ransomware_live—
fordcountrymotors.mxOctober 5, 2024ransomware_live—
tpgagedcare.com.auOctober 3, 2024ransomware_live—
mirandaproduce.com.veOctober 1, 2024ransomware_live—
vikurverk.isSeptember 30, 2024ransomware_live—
chcm.usSeptember 26, 2024ransomware_live—
oleopalma.com.mxSeptember 23, 2024ransomware_live—
salaam.afSeptember 9, 2024ransomware_live—
arc-com.comSeptember 9, 2024ransomware_live—
nhbg.com.coSeptember 4, 2024ransomware_live—
designintoto.com.auAugust 30, 2024ransomware_live—
robesoncoso.orgAugust 30, 2024ransomware_live—
tdsb.on.caAugust 29, 2024ransomware_live—
rhp.com.brAugust 28, 2024ransomware_live—
kumhotire.comAugust 25, 2024ransomware_live—
dowley.comAugust 19, 2024ransomware_live—
aerworldwide.comAugust 17, 2024ransomware_live—
policiaauxiliarcusaem.com.mxAugust 16, 2024ransomware_live—
sullivansteelservice.comAugust 11, 2024ransomware_live—
brockington.leisc.sch.ukAugust 11, 2024ransomware_live—
kronospublic.comAugust 10, 2024ransomware_live—
sampoernaagro.comAugust 6, 2024ransomware_live—
fcl.crsAugust 3, 2024ransomware_live—
sandytownshippolice.orgJuly 26, 2024ransomware_live—
petroassist.co.ukJuly 24, 2024ransomware_live—
tccfleet.comJuly 22, 2024ransomware_live—
joliet86.orgJuly 18, 2024ransomware_live—
fbrlaw.comJuly 18, 2024ransomware_live—
barkingwell.grJuly 18, 2024ransomware_live—
troyareasd.orgJuly 18, 2024ransomware_live—
paysdelaloire.frJuly 18, 2024ransomware_live—
glsco.comJuly 18, 2024ransomware_live—
goldstarmetal.comJuly 18, 2024ransomware_live—
lothar-rapp.deJuly 18, 2024ransomware_live—
albonanova.atJuly 18, 2024ransomware_live—
gptchb.orgJuly 17, 2024ransomware_live—
piedmonthoist.comJuly 17, 2024ransomware_live—
plantmachineworks.comJuly 17, 2024ransomware_live—
energateinc.comJuly 17, 2024ransomware_live—
e21c.co.ukJuly 15, 2024ransomware_live—
nicholsfleet.comJuly 13, 2024ransomware_live—
customssupport.beJuly 12, 2024ransomware_live—
iteam.grJuly 10, 2024ransomware_live—
claycountyin.govJuly 8, 2024ransomware_live—
noab.nlJuly 6, 2024ransomware_live—
eicher.inJuly 4, 2024ransomware_live—
ws-stahl.euJuly 4, 2024ransomware_live—
fairfieldmemorial.orgJuly 2, 2024ransomware_live—
merrymanhouse.orgJuly 2, 2024ransomware_live—
glnf.frJuly 2, 2024ransomware_live—
kbc-zagreb.hrJuly 1, 2024ransomware_live—
alconca.com.veJune 30, 2024ransomware_live—
atcdi.com.cnJune 26, 2024ransomware_live—
Page 1 of 21Older →

Claim data from ransomware.live and RansomLook (CC BY 4.0).