Ransomware Group intelligence

Lockbit3

Inactive

Track Lockbit3 with 2021 published victims and 40 known leak locations in a single intelligence view.

Victims 2021 Known published victims in this dataset
First discovered 2022-06-29 Earliest victim discovery date
Last discovered 2025-12-05 Latest victim discovery date
Inactive since 235 days Days since the latest known victim
Top country United States 311 victims
Known locations 40 Leak or negotiation infrastructure tracked

Overview

Lockbit3 is tracked by Breach House as a ransomware group with 2021 published victims.

United States is currently the most targeted country in this dataset.

40 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (40)

    Label Type Availability Links
    Leak location 1 Onion service Unknown lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion
    Leak location 2 Onion service Unknown lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
    Leak location 3 Onion service Unknown lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion
    Leak location 4 Onion service Unknown lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion
    Leak location 5 Onion service Unknown lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion
    Leak location 6 Onion service Unknown lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion
    Leak location 7 Onion service Unknown lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion
    Leak location 8 Onion service Unknown lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion
    Leak location 9 Onion service Unknown lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion
    Leak location 10 Onion service Unknown lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion
    Leak location 11 Onion service Unknown lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion
    Leak location 12 Onion service Unknown lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion
    Leak location 13 Onion service Unknown lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion
    Leak location 14 Onion service Unknown lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion
    Leak location 15 Onion service Unknown lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion
    Leak location 16 Onion service Unknown lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion
    Leak location 17 Onion service Unknown lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion
    Leak location 18 Onion service Unknown lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion
    Leak location 19 Onion service Unknown lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion
    Leak location 20 Onion service Unknown lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion
    Leak location 21 Onion service Unknown lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion
    Leak location 22 Onion service Unknown lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion
    Leak location 23 Onion service Unknown lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion
    Leak location 24 Onion service Unknown lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion
    Leak location 25 Onion service Unknown lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion
    Leak location 26 Onion service Unknown lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion
    Leak location 27 Onion service Unknown lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 28 Onion service Unknown ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion
    Leak location 29 Onion service Unknown lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 30 Onion service Unknown lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion
    Leak location 31 Onion service Unknown lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion
    Leak location 32 Onion service Unknown lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion
    Leak location 33 Onion service Unknown lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion
    Leak location 34 Onion service Unknown lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion
    Leak location 35 Onion service Unknown lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion
    Leak location 36 Onion service Unknown lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion
    Leak location 37 Onion service Unknown lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion
    Leak location 38 Onion service Unknown lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion
    Leak location 39 Onion service Unknown lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 40 Onion service Unknown lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2021)

    Search, filter and paginate the victim timeline for Lockbit3. Showing 901–1000 of 2021.

    Type Target Discovered Country Business Category Intel Link
    Ransomware ragasa.com.mx id8522 View details Mexico Energy
    Ransomware onyx-fire.com id8520 View details Finance / Legal / Insurance
    Ransomware gormanusa.com id8519 View details Construction / Real Estate
    Ransomware spmblaw.com id8489 View details Finance / Legal / Insurance
    Ransomware godbeylaw.com id8486 View details Finance / Legal / Insurance
    Ransomware cdwg.com id8464 View details United States IT
    Ransomware gosslaw.com id8455 View details Finance / Legal / Insurance
    Ransomware marianoshoes.com id8454 View details Communication / Marketing
    Ransomware glprop.com id8444 View details Communication / Marketing
    Ransomware seasonsdarlingharbour.com.au id8441 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware nerolac.com id8440 View details Finance / Legal / Insurance
    Ransomware ramlowstein.com id8439 View details United States Manufacturing / Engineering
    Ransomware sterncoengineers.com id8437 View details Other
    Ransomware attorneydanwinder.com id8436 View details Finance / Legal / Insurance
    Ransomware designlink.us id8435 View details United States Services
    Ransomware gh2.com id8434 View details United States Manufacturing / Engineering
    Ransomware cc-gorgesardeche.fr id8428 View details France Other
    Ransomware cciamp.com id8425 View details Communication / Marketing
    Ransomware vodatech.com.tr id8420 View details Türkiye IT
    Ransomware hamilton-techservices.com id8417 View details IT
    Ransomware aquinas.qld.edu.au id8416 View details Australia Education
    Ransomware konkconsulting.com id8415 View details Portugal Services
    Ransomware guyer.com.uy id8412 View details Uruguay Finance / Legal / Insurance
    Ransomware deschamps.fr id8411 View details France Agriculture / Food
    Ransomware mayair.com.my id8410 View details Malaysia Manufacturing / Engineering
    Ransomware chevalerias.com id8409 View details Agriculture / Food
    Ransomware abzarsara.com id8407 View details Iran, Islamic Republic of Energy
    Ransomware millwgs.com id8396 View details Transportation / Travel / Logistics
    Ransomware biso.at id8395 View details Austria Construction / Real Estate
    Ransomware antioch.edu id8390 View details United States Education
    Ransomware zep.it id8388 View details Italy Communication / Marketing
    Ransomware skystar.it id8387 View details Italy Transportation / Travel / Logistics
    Ransomware rydershealth.com id8386 View details Healthcare / Pharma
    Ransomware nieul-sur-mer.fr id8385 View details France Other
    Ransomware tavlit.co.il id8384 View details Israel Communication / Marketing
    Ransomware mariocoelho.com id8383 View details Other
    Ransomware grebe-korbach.de id8382 View details Germany Manufacturing / Engineering
    Ransomware optoflux.com id8381 View details Communication / Marketing
    Ransomware alpepipesystems.com id8380 View details Manufacturing / Engineering
    Ransomware losh.com id8379 View details Communication / Marketing
    Ransomware greensboro.edu id8378 View details United States Education
    Ransomware emec.com.eg id8377 View details Syrian Arab Republic Services
    Ransomware auto-pieces.fr id8376 View details France Manufacturing / Engineering
    Ransomware guillerm-habitat.fr id8375 View details France Construction / Real Estate
    Ransomware acolea.org id8374 View details NGOs / Associations
    Ransomware otltd.co.uk id8373 View details United Kingdom Communication / Marketing
    Ransomware annals.edu.sg id8372 View details Singapore Other
    Ransomware inouemfg.com id8371 View details Japan Other
    Ransomware potenciamaquinaria.com id8370 View details Finance / Legal / Insurance
    Ransomware locaparc.fr id8369 View details France Other
    Ransomware dollinger-pierre.fr id8368 View details France Services
    Ransomware feuille-erable.fr id8367 View details France Communication / Marketing
    Ransomware texline-global.com id8366 View details Communication / Marketing
    Ransomware lhvisionclinic.com id8360 View details Healthcare / Pharma
    Ransomware sherwin-electric.com id8354 View details Manufacturing / Engineering
    Ransomware beniculturali.it id8353 View details Italy Public Sector
    Ransomware jamaicainn.com id8352 View details Jamaica Communication / Marketing
    Ransomware uprepschool.org id8351 View details Education
    Ransomware casa-andina.com id8346 View details Peru Construction / Real Estate
    Ransomware renaultinantwerpen.be id8345 View details Belgium Retail / E-commerce
    Ransomware greenside-sch.org id8344 View details Education
    Ransomware wkclawfirm.com id8343 View details Finance / Legal / Insurance
    Ransomware distribuidoradavidsa.com id8342 View details Panama IT
    Ransomware cm.gov.nc.tr id8341 View details Türkiye Public Sector
    Ransomware younghomes.com id8340 View details Other
    Ransomware fimadev.fr id8339 View details France Other
    Ransomware immoselekt.be id8338 View details Belgium Other
    Ransomware cloverbrook.com id8337 View details Communication / Marketing
    Ransomware carolfoxassociates.com id8336 View details Communication / Marketing
    Ransomware mergerecords.com id8335 View details Other
    Ransomware ukseung.co.kr id8334 View details Korea, Republic of Manufacturing / Engineering
    Ransomware michalovich.co.il id8333 View details Israel Communication / Marketing
    Ransomware esprigas.com id8329 View details Energy
    Ransomware Kendrion.com id8325 View details Communication / Marketing
    Ransomware grupomartex.com id8312 View details Services
    Ransomware jhilburn.com id8311 View details Other
    Ransomware senacrs.com.br id8285 View details Brazil Communication / Marketing
    Ransomware qintess.com id8245 View details Services
    Ransomware iledefrance-nature.fr id8244 View details France Communication / Marketing
    Ransomware newsupri.com.br id8243 View details Brazil Communication / Marketing
    Ransomware mcnamaradrass.com id8233 View details Finance / Legal / Insurance
    Ransomware tonystark.com id8230 View details Other
    Ransomware decrolyamericano.edu.gt id8227 View details Guatemala Education
    Ransomware sicl.lk id8225 View details Sri Lanka Finance / Legal / Insurance
    Ransomware apdparcel.com.au id8218 View details Australia Transportation / Travel / Logistics
    Ransomware stockwellharris.com id8211 View details Finance / Legal / Insurance
    Ransomware hallbergengineering.com id8210 View details Manufacturing / Engineering
    Ransomware cloudtopoffice.com id8209 View details IT
    Ransomware equip-reuse.com id8208 View details Manufacturing / Engineering
    Ransomware cochraninc.com id8207 View details Energy
    Ransomware s3groupltd.com id8202 View details Communication / Marketing
    Ransomware macuspana.gob.mx id8201 View details Mexico Other
    Ransomware phitoformulas.com.br id8200 View details Brazil Healthcare / Pharma
    Ransomware purever.com id8191 View details Other
    Ransomware neolife.com id8190 View details United States Healthcare / Pharma
    Ransomware mitchcointernational.com id8189 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware tedpella.com id8188 View details Agriculture / Food
    Ransomware umchealth.com id8185 View details Healthcare / Pharma
    Ransomware sgl.co.th id8184 View details Thailand Transportation / Travel / Logistics
    Ransomware SFJAZZ.ORG id8181 View details United States Communication / Marketing