lorenz
First seen January 12, 2020Active78 claimed victims
The claims below are reproduced as posted by lorenz on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by the attackers. A free decryptor for 2021 versions was made available via the NoMoreRansom initiative. A new version of the malware was discovered in March 2022, for which again was provided a free decryptor, while the ransomware operators are not able to provide tools to decrypt affected files.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Bayer Heritage Federal Credit Union | December 1, 2023 | ransomware_live | — |
| EOS | November 15, 2023 | ransomware_live | — |
| Cogdell Memorial Hospital | November 9, 2023 | ransomware_live | — |
| Koh Brothers | November 2, 2023 | ransomware_live | — |
| Truck Bodies & Equipment International | October 27, 2023 | ransomware_live | — |
| Broad River Retail/Ashley Store | October 15, 2023 | ransomware_live | — |
| AllCare Pharmacy | October 2, 2023 | ransomware_live | — |
| Dee Sign | September 12, 2023 | ransomware_live | — |
| BF&S Civil Engineers | August 20, 2023 | ransomware_live | — |
| Felling Trailers, Inc. | July 13, 2023 | ransomware_live | — |
| Moore Engineering | April 5, 2023 | ransomware_live | — |
| Intrasect Technologies | April 5, 2023 | ransomware_live | — |
| NGS Super | April 5, 2023 | ransomware_live | — |
| Joy Cone Co, Joy Baking group, BoDeans Baking, Altesa | April 5, 2023 | ransomware_live | — |
| Tarolli, Sundheim, Covell & Tummino LLP | April 5, 2023 | ransomware_live | — |
| Tarolli | March 14, 2023 | ransomware_live | — |
| Manning Building Supplies | March 14, 2023 | ransomware_live | — |
| Hopsteiner | February 20, 2023 | ransomware_live | — |
| AmerisourceBergen/Censora - MWI Animal Health | February 6, 2023 | ransomware_live | — |
| Shelco | January 10, 2023 | ransomware_live | — |
| Thor Specialties, Inc. | January 10, 2023 | ransomware_live | — |
| Chestertons Inc. | January 10, 2023 | ransomware_live | — |
| Albina Asphalt | December 7, 2022 | ransomware_live | — |
| Holler-Classic | November 30, 2022 | ransomware_live | — |
| Salud Family Health | November 14, 2022 | ransomware_live | — |
| Nissan of Las Cruces | November 14, 2022 | ransomware_live | — |
| Main & Main Capital Group | November 10, 2022 | ransomware_live | — |
| Miracapo pizza company | October 27, 2022 | ransomware_live | — |
| Wes-tec inc. | October 18, 2022 | ransomware_live | — |
| Laddawn Inc. | September 16, 2022 | ransomware_live | — |
| Engine Power | August 23, 2022 | ransomware_live | — |
| Northern Contours Inc. | August 22, 2022 | ransomware_live | — |
| Fandeli | July 29, 2022 | ransomware_live | — |
| Gresco | July 13, 2022 | ransomware_live | — |
| Biothane usa | July 13, 2022 | ransomware_live | — |
| Van Ausdall & Farrar, inc | July 13, 2022 | ransomware_live | — |
| Uppco | July 11, 2022 | ransomware_live | — |
| Wis-Pak, Inc | July 5, 2022 | ransomware_live | — |
| Bonneville Collections | June 27, 2022 | ransomware_live | — |
| Westwood | May 31, 2022 | ransomware_live | — |
| Mebulbs | May 26, 2022 | ransomware_live | — |
| Magtek | May 19, 2022 | ransomware_live | — |
| AmCham Shanghai | May 16, 2022 | ransomware_live | — |
| Brunk Industries Inc. | May 16, 2022 | ransomware_live | — |
| Tosoh Corporation | May 5, 2022 | ransomware_live | — |
| Tosoh Bioscience | May 4, 2022 | ransomware_live | — |
| Morrie's Auto Group | April 21, 2022 | ransomware_live | — |
| Musco Sports Lighting | April 14, 2022 | ransomware_live | — |
| Simply Placed | April 13, 2022 | ransomware_live | — |
| DeeZee | April 12, 2022 | ransomware_live | — |
| Advizrs | April 11, 2022 | ransomware_live | — |
| Keicorp(ICPM) | April 6, 2022 | ransomware_live | — |
| Biz Retek | March 29, 2022 | ransomware_live | — |
| Ward Hadaway | March 15, 2022 | ransomware_live | — |
| VadaTech | March 15, 2022 | ransomware_live | — |
| Fuji America Corporation | March 15, 2022 | ransomware_live | — |
| Hensoldt | January 11, 2022 | ransomware_live | — |
| Turner Enterprises, Inc. | December 23, 2021 | ransomware_live | — |
| Kenall/Legrand | December 14, 2021 | ransomware_live | — |
| Component Assembly Systems | November 15, 2021 | ransomware_live | — |
| SCREEN Holdings | September 21, 2021 | ransomware_live | — |
| Sebastian | August 10, 2021 | ransomware_live | — |
| Miller-Valentine Group | July 29, 2021 | ransomware_live | — |
| MPS Credit Union | July 27, 2021 | ransomware_live | — |
| Buchanan Hauling & Rigging | June 24, 2021 | ransomware_live | — |
| Langs Building Supplies Pty Ltd | June 1, 2021 | ransomware_live | — |
| Langs Building Supplies | May 20, 2021 | ransomware_live | — |
| Challenge Manufacturing Company | May 11, 2021 | ransomware_live | — |
| Airtech Advanced Materials Group | April 29, 2021 | ransomware_live | — |
| DNS Toptech | April 13, 2021 | ransomware_live | — |
| Joy Cone | April 11, 2021 | ransomware_live | — |
| Bases Conversion and Development Authority (BCDA) | April 1, 2021 | ransomware_live | — |
| Tygavac ltd. | April 1, 2021 | ransomware_live | — |
| Wolfe Eye Clinic | April 1, 2021 | ransomware_live | — |
| The managementtrust | February 11, 2021 | ransomware_live | — |
| Multifeeder | January 10, 2021 | ransomware_live | — |
| Commport Communications | December 20, 2020 | ransomware_live | — |
| Windemuller | January 12, 2020 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).