lockbit5
First seen December 4, 2025Active426 claimed victims
The claims below are reproduced as posted by lockbit5 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
LockBit 5.0 ("ChuongDong") emerged in September 2025 as the group's resurgence following the February 2024 law enforcement takedown, introducing cross-platform payloads targeting Windows, Linux, and VMware ESXi with enhanced evasion capabilities and continuing the RaaS affiliate model of its predecessors.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| lidoway.com | October 23, 2026 | ransomlook | — |
| mlh.com.lb | October 23, 2026 | ransomlook | — |
| dorsiacademy.it | October 23, 2026 | ransomlook | — |
| istanbultrading.com | October 22, 2026 | ransomlook | — |
| chooseultimate.com | October 19, 2026 | ransomware_live | — |
| ock.com.my | October 16, 2026 | ransomlook | — |
| karix.com | October 15, 2026 | ransomlook | — |
| grupoabg.com | October 15, 2026 | ransomlook | — |
| neweramachines.com | October 15, 2026 | ransomlook | — |
| lcww.com.eg | October 15, 2026 | ransomlook | — |
| kidzrkooldental.com | October 15, 2026 | ransomlook | — |
| torcivialaw.com | October 15, 2026 | ransomlook | — |
| saintpierredescorps.fr | October 14, 2026 | ransomware_live | — |
| poolegroup.com.au | October 14, 2026 | ransomware_live | — |
| kordhotels.gr | October 14, 2026 | ransomlook | — |
| skycc.co.th | October 13, 2026 | ransomlook | — |
| saintpierredescorps.fr | October 10, 2026 | ransomlook | — |
| poolegroup.com.au | October 10, 2026 | ransomlook | — |
| avsa.com.ar | October 7, 2026 | ransomlook | — |
| grunenwald.com | October 7, 2026 | ransomlook | — |
| capitalbankhaiti.biz | October 5, 2026 | ransomlook | — |
| consilio.com | October 1, 2026 | ransomlook | — |
| spg.co.kr | September 29, 2026 | ransomlook | — |
| camorim.com.br | September 28, 2026 | ransomlook | — |
| corisricambi.it | September 24, 2026 | ransomlook | — |
| anery.com.br | September 23, 2026 | ransomlook | — |
| taspenlife.com | September 22, 2026 | ransomlook | — |
| siinqeebank.com | September 21, 2026 | ransomlook | — |
| forus.cl | September 18, 2026 | ransomlook | — |
| hygear.com | September 17, 2026 | ransomlook | — |
| httoy.fi | September 14, 2026 | ransomlook | — |
| comune.robeccosulnaviglio.mi.it | September 14, 2026 | ransomlook | — |
| tpi.tw | September 14, 2026 | ransomlook | — |
| hygear.com | September 11, 2026 | ransomware_live | — |
| alphaomega-eng.com | September 10, 2026 | ransomlook | — |
| httoy.fi | September 9, 2026 | ransomware_live | — |
| amorsaude.com.br | September 9, 2026 | ransomware_live | — |
| contreras.com.ar | September 8, 2026 | ransomlook | — |
| fdcputman.nl | September 8, 2026 | ransomlook | — |
| vsbattorneys.co.za | September 8, 2026 | ransomlook | — |
| huisartsencentrumkleiniterson.nl | September 4, 2026 | ransomlook | — |
| kalahealth.eu | September 4, 2026 | ransomlook | — |
| pscindustries.com | September 4, 2026 | ransomlook | — |
| vsbattorneys.co.za | September 3, 2026 | ransomware_live | — |
| alphaomega-eng.com | September 2, 2026 | ransomware_live | — |
| comune.robeccosulnaviglio.mi.it | September 1, 2026 | ransomware_live | — |
| pscindustries.com | August 31, 2026 | ransomware_live | — |
| hoaattorneys.com | August 31, 2026 | ransomlook | — |
| svfcu.org | August 31, 2026 | ransomlook | — |
| bkc.org | August 31, 2026 | ransomlook | — |
| allsteelproducts.nl | August 31, 2026 | ransomlook | — |
| vkj.nl | August 31, 2026 | ransomlook | — |
| bartelsbv.nl | August 31, 2026 | ransomlook | — |
| apatpa.com | August 29, 2026 | ransomlook | — |
| huisartsencentrumkleiniterson.nl | August 28, 2026 | ransomware_live | — |
| kalahealth.eu | August 27, 2026 | ransomware_live | — |
| dece.cz | August 27, 2026 | ransomlook | — |
| takt.be | August 27, 2026 | ransomlook | — |
| fpmanagement.nl | August 27, 2026 | ransomlook | — |
| tnmed.org | August 27, 2026 | ransomlook | — |
| theheartcenterofmemphis.com | August 26, 2026 | ransomlook | — |
| fpmanagement.nl | August 23, 2026 | ransomware_live | — |
| adt.com | August 23, 2026 | ransomware_live | — |
| amorsaude.com.br | August 22, 2026 | ransomware_live | — |
| icnavais.com | August 22, 2026 | ransomware_live | — |
| usbank.com | August 20, 2026 | ransomware_live | — |
| takt.be | August 17, 2026 | ransomware_live | — |
| apatpa.com | August 17, 2026 | ransomware_live | — |
| terra-petra.com | August 17, 2026 | ransomware_live | — |
| vgrn.de | August 16, 2026 | ransomware_live | — |
| tecosim.com | August 16, 2026 | ransomware_live | — |
| agricolagalbusera.it | August 16, 2026 | ransomware_live | — |
| dupouy-associes.fr | August 16, 2026 | ransomware_live | — |
| actua.fr | August 16, 2026 | ransomware_live | — |
| dupouy-associes.fr | August 12, 2026 | ransomware_live | — |
| terra-petra.com | August 10, 2026 | ransomware_live | — |
| theheartcenterofmemphis.com | August 7, 2026 | ransomware_live | — |
| actua.fr | August 7, 2026 | ransomware_live | — |
| tecosim.com | August 6, 2026 | ransomware_live | — |
| briggsplc.com | August 4, 2026 | ransomware_live | — |
| usbank.com | August 1, 2026 | ransomware_live | — |
| hoaattorneys.com | July 31, 2026 | ransomware_live | — |
| rai.com.br | July 29, 2026 | ransomware_live | — |
| microphase.com | July 29, 2026 | ransomware_live | — |
| setic-pourtier.com | July 27, 2026 | ransomware_live | — |
| microphase.com | July 25, 2026 | ransomware_live | — |
| setic-pourtier.com | July 22, 2026 | ransomware_live | — |
| micropack.com.ar | July 18, 2026 | ransomware_live | — |
| delkartindustries.com | July 18, 2026 | ransomware_live | — |
| pcclimitedindia.com | July 18, 2026 | ransomware_live | — |
| adventusasia.com | July 18, 2026 | ransomware_live | — |
| sms-sme.com | July 18, 2026 | ransomware_live | — |
| tpi.tw | July 17, 2026 | ransomware_live | — |
| vgrn.de | July 17, 2026 | ransomware_live | — |
| agricolagalbusera.it | July 17, 2026 | ransomware_live | — |
| briggsplc.com | July 17, 2026 | ransomware_live | — |
| sirsa.it | July 13, 2026 | ransomware_live | — |
| delkartindustries.com | July 8, 2026 | ransomware_live | — |
| sirsa.it | July 5, 2026 | ransomware_live | — |
| ravagnan.com | July 3, 2026 | ransomware_live | — |
Page 1 of 5Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).