Ransomware Group intelligence
Lockbit3
InactiveTrack Lockbit3 with 2022 published victims and 42 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Lockbit3 is tracked by Breach House as a ransomware group with 2022 published victims.
United States is currently the most targeted country in this dataset.
42 known leak locations are currently associated with this group.
Leak Status Distribution
26
- Leaked 10 38.5%
- Pending 16 61.5%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (42)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 27 | Onion service | Up checked 4h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 29 | Onion service | Up checked 4h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 39 | Onion service | Up checked 4h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 42 | Onion service | Down checked 4h ago | lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion |
| Leak location 41 | Onion service | Down checked 4h ago | lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43foocwmrzsokumqid.onion |
| Leak location 40 | Onion service | Down checked 4h ago | lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion |
| Leak location 35 | Onion service | Down checked 4h ago | lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion |
| Leak location 38 | Onion service | Down checked 4h ago | lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion |
| Leak location 37 | Onion service | Down checked 4h ago | lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion |
| Leak location 36 | Onion service | Down checked 4h ago | lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion |
| Leak location 34 | Onion service | Down checked 4h ago | lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion |
| Leak location 33 | Onion service | Down checked 4h ago | lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion |
| Leak location 32 | Onion service | Down checked 4h ago | lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion |
| Leak location 31 | Onion service | Down checked 4h ago | lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion |
| Leak location 30 | Onion service | Down checked 4h ago | lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion |
| Leak location 28 | Onion service | Down checked 4h ago | ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion |
| Leak location 26 | Onion service | Down checked 4h ago | lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion |
| Leak location 24 | Onion service | Down checked 4h ago | lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion |
| Leak location 25 | Onion service | Down checked 4h ago | lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion |
| Leak location 23 | Onion service | Down checked 4h ago | lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion |
| Leak location 21 | Onion service | Down checked 4h ago | lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion |
| Leak location 22 | Onion service | Down checked 4h ago | lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion |
| Leak location 20 | Onion service | Down checked 4h ago | lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion |
| Leak location 19 | Onion service | Down checked 4h ago | lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion |
| Leak location 17 | Onion service | Down checked 4h ago | lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion |
| Leak location 18 | Onion service | Down checked 4h ago | lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion |
| Leak location 16 | Onion service | Down checked 4h ago | lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion |
| Leak location 15 | Onion service | Down checked 4h ago | lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion |
| Leak location 14 | Onion service | Down checked 4h ago | lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion |
| Leak location 12 | Onion service | Down checked 4h ago | lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion |
| Leak location 13 | Onion service | Down checked 4h ago | lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion |
| Leak location 9 | Onion service | Down checked 4h ago | lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion |
| Leak location 11 | Onion service | Down checked 4h ago | lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion |
| Leak location 8 | Onion service | Down checked 4h ago | lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion |
| Leak location 7 | Onion service | Down checked 4h ago | lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion |
| Leak location 6 | Onion service | Down checked 4h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 10 | Onion service | Down checked 4h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 5 | Onion service | Down checked 4h ago | lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion |
| Leak location 4 | Onion service | Down checked 4h ago | lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion |
| Leak location 3 | Onion service | Down checked 4h ago | lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion |
| Leak location 2 | Onion service | Down checked 4h ago | lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion |
| Leak location 1 | Onion service | Down checked 4h ago | lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion |
Top Activity Sectors (17)
- Not identified 462
- Communication / Marketing 418
- Services 158
- Manufacturing / Engineering 144
- Finance / Legal / Insurance 141
- Healthcare / Pharma 108
- Education 92
- Construction / Real Estate 76
- IT 73
- Energy 69
- Public Sector 65
- Retail / E-commerce 57
- Transportation / Travel / Logistics 52
- Hospitality / Food & Beverage / Tourism 35
- Agriculture / Food 31
- Telecommunications 24
- NGOs / Associations 13
Typical Attacks (34)
▼How Lockbit3 typically operates, as attributed by MITRE ATT&CK v19.2. Attributed via LockBit 3.0.
-
What they do: LockBit 3.0 can use a compromised local account for lateral movement.
What that means: Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1059.001 PowerShell Execution
What they do: LockBit 3.0 can use PowerShell to apply Group Policy changes.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: LockBit 3.0 has the ability to directly call native Windows API items during execution.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
T1569.002 Service Execution Execution
What they do: LockBit 3.0 can use PsExec to execute commands and payloads.
What that means: Adversaries may abuse the Windows service control manager to execute malicious commands or payloads.
-
What they do: LockBit 3.0 can change the Registry values for Group Policy refresh time, to disable SmartScreen, and to disable Windows Defender.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
What they do: LockBit 3.0 can install system services for persistence.
What that means: Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence.
-
What they do: LockBit 3.0 can enable automatic logon through the `SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon` Registry key.
What that means: Adversaries may abuse features of Winlogon to execute DLLs and/or executables when a user logs in.
-
What they do: LockBit 3.0 can enable options for propogation through Group Policy Objects.
What that means: Adversaries may modify Group Policy Objects (GPOs) to subvert the intended discretionary access controls for a domain, usually with the intention of escalating privileges on the domain.
-
T1548.002 Bypass User Account Control Privilege Escalation
What they do: LockBit 3.0 can bypass UAC to execute code with elevated privileges through an elevated Component Object Model (COM) interface.
What that means: Adversaries may bypass UAC mechanisms to elevate process privileges on system.
-
T1027.002 Software Packing Stealth
What they do: LockBit 3.0 can use code packing to hinder analysis.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1027.013 Encrypted/Encoded File Stealth
What they do: The LockBit 3.0 payload includes an encrypted main component.
What that means: Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.
-
T1070.004 File Deletion Stealth
What they do: LockBit 3.0 can delete itself from disk.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1140 Deobfuscate/Decode Files or Information Stealth
What they do: The LockBit 3.0 payload is decrypted at runtime.
What that means: Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis.
-
T1218.003 CMSTP Stealth
What they do: LockBit 3.0 can attempt a CMSTP UAC bypass if it does not have administrative privileges.
What that means: Adversaries may abuse CMSTP to proxy execution of malicious code.
-
T1480 Execution Guardrails Stealth
What they do: LockBit 3.0 can make execution dependent on specific parameters including a unique passphrase and the system language of the targeted host not being found on a set exclusion list.
What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
-
T1480.002 Mutual Exclusion Stealth
What they do: LockBit 3.0 can create and check for a mutex containing a hash of the `MachineGUID` value at execution to prevent running more than one instance.
What that means: Adversaries may constrain execution or actions based on the presence of a mutex associated with malware.
-
What they do: LockBit 3.0 can check heap memory parameters for indications of a debugger and stop the flow of events to the attached debugger in order to hinder dynamic analysis.
What that means: Adversaries may employ various means to detect and avoid debuggers.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: LockBit 3.0 can disable security tools to evade detection including Windows Defender.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1685.005 Clear Windows Event Logs Defense Impairment
What they do: LockBit 3.0 can delete log files on targeted systems.
What that means: Adversaries may clear Windows Event Logs to hide the activity of an intrusion.
-
T1688 Safe Mode Boot Defense Impairment
What they do: LockBit 3.0 can reboot the infected host into Safe Mode.
What that means: Adversaries may abuse Windows safe mode to disable endpoint defenses.
-
T1057 Process Discovery Discovery
What they do: LockBit 3.0 can identify and terminate specific services.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1082 System Information Discovery Discovery
What they do: LockBit 3.0 can enumerate system hostname and domain.
What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
-
T1083 File and Directory Discovery Discovery
What they do: LockBit 3.0 can exclude files associated with core system functions from encryption.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1120 Peripheral Device Discovery Discovery
What they do: LockBit 3.0 has the ability to discover external storage devices.
What that means: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.
-
T1135 Network Share Discovery Discovery
What they do: LockBit 3.0 can identify network shares on compromised systems.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1614.001 System Language Discovery Discovery
What they do: LockBit 3.0 will not affect machines with language settings matching a defined exlusion list of mainly Eastern European languages.
What that means: Adversaries may attempt to gather information about the system language of a victim in order to infer the geographical location of that host.
-
T1680 Local Storage Discovery Discovery
What they do: LockBit 3.0 can enumerate local drive configuration.
What that means: Adversaries may enumerate local drives, disks, and/or volumes and their attributes like total or free space and volume serial number.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: LockBit 3.0 can use SMB for lateral movement.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1071.001 Web Protocols Command and Control
What they do: LockBit 3.0 can use HTTP to send victim host information to C2.
What that means: Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic.
-
T1132.001 Standard Encoding Command and Control
What they do: LockBit 3.0 can Base64-encode C2 communication.
What that means: Adversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect.
-
T1573.001 Symmetric Cryptography Command and Control
What they do: LockBit 3.0 can encrypt C2 communications with AES.
What that means: Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol.
-
T1486 Data Encrypted for Impact Impact
What they do: LockBit 3.0 can encrypt targeted data using the AES-256, ChaCha20, or RSA-2048 algorithms.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: LockBit 3.0 can terminate targeted processes and services related to security, backup, database management, and other applications that could stop or interfere with encryption.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: LockBit 3.0 can delete volume shadow copies.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (51)
▼Software Lockbit3 has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
Gosecretsdump
LaZagne
LostMyPassword
Mimikatz
NirSoft ExtPassword
PasswordFox
ProcDump
Veeam-Get-Creds
Defense evasion
Backstab/Process Explorer driver (BYOVD)
Defender Control
GMER
PCHunter
PowerTool
ProcessHacker
TDSSKiller
Discovery & enumeration
AdFind
Advanced IP Scanner
Advanced Port Scanner
Bloodhound
Seatbelt
SoftPerfect NetScan
Exfiltration
Anonfiles
FileZilla
FreeFileSync
File[.]io
MEGA
RClone
Sendspace
Temp[.]sh
Tempsend
Transfert-my-files
Transfer[.]sh
WinSCP
LOLBAS (living-off-the-land binaries)
BCDEdit
PsExec
Networking & tunnelling
Ligolo
Ngrok
Plink
Offensive security tooling
Cobalt Strike
Impacket
Koadic
Metasploit
PowerShell Empire
ThunderShell
Remote monitoring & management
Action1
AnyDesk
FixMeIt
ScreenConnect
Splashtop
TeamViewer
ZohoAssist
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Victims (2022)
Search, filter and paginate the victim timeline for Lockbit3. Showing 1301–1400 of 2022.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | piszcz.pl id6126 View details | Poland | Finance / Legal / Insurance | — | ||
|
We are one of the leading law firms in the Wielkopolska region and according to prestigious national rankings, we are also among top Polish law firms. We have many years of experience in the provision of comprehensive legal services to big and mediu... |
||||||
| Ransomware | steel-eye.com id6125 View details | Manufacturing / Engineering | — | |||
|
Once in the SteelEye platform, our clients can then use one or more of our compliance solutions to reduce their risk, save costs and unleash the power of their data, ultimately complying smarter. |
||||||
| Ransomware | sanden.com.ph id6124 View details | Philippines | Manufacturing / Engineering | — | ||
|
Sanden International Philippines Inc is a company that operates in the Machinery industry. It employs 21-50 people and has $5M-$10M of revenue |
||||||
| Ransomware | teleferico.com id6113 View details | Communication / Marketing | — | |||
|
Continuando um dos passeios tradicionais e mais apreciados pelos turistas e pela população, outrora proporcionado pelo comboio do Monte, o Teleférico do Funchal oferece nos nossos dias aos seus passageiros um passeio sobre a paisagem e um panorama de... |
||||||
| Ransomware | apro.cl id6112 View details | Chile | Communication / Marketing | — | ||
|
Apro Ltda., empresa líder en la comercialización de Elementos de Protección Personal y Artículos de Seguridad Industrial con 40 años de permanencia en el mercado Chileno.Nace en 1980 debido a la inquietud de su actual Gerente General, quien formó est... |
||||||
| Ransomware | bcncruiseport.com id6111 View details | Hospitality / Food & Beverage / Tourism | — | |||
|
Barcelona Cruise Port - Creuers Terminals, is composed of 5 Terminals. North and South Terminals are located in the World Trade Center, while the other three; Terminal A, Terminal B and Terminal C are located on the "Adossat" dock, crossing the "Port... |
||||||
| Ransomware | fosfa.cz id6110 View details | Czechia | Communication / Marketing | — | ||
|
Life Science. Fosfa je nejvtm zpracovatelem lutého fosforu v Evrop. Svoje produkty vyv do vce ne 80 zem celého svta. Vyvj a vyrb vlastn adu ekologicky etrnch prostedk pée o domcnost a kosmetiky Feel eco. Provozuje prvn vertikln farmu v eské republice... |
||||||
| Ransomware | darktrace.com id6109 View details | Communication / Marketing | — | |||
|
I love dark trace, thanks for following the testing of my updates. In case you're very interested, what you've scraped is testing improvements to server-to-server communication, Poppy, would you like to go to a restaurant with me? you sexy |
||||||
| Ransomware | conseildelentente.org id6102 View details | Other | — | |||
|
West African regional co-operation forum established |
||||||
| Ransomware | irda.com.my id6101 View details | Malaysia | Public Sector | — | ||
|
Iskandar Regional Development Authority (IRDA) is a Malaysian Federal Government statutory body tasked with the objective of regulating and driving various stakeholders in both public and private sector towards realizing the vision of developing Iska... |
||||||
| Ransomware | medmark.eg id6100 View details | Egypt | Finance / Legal / Insurance | — | ||
|
Medmark Insurance Brokerage is a full-fledged insurance brokerage, offering a wide range of personal and general insurance solutions to individuals and families as well as companies and organizations in Egypt. With over 30 years of experience, our sp... |
||||||
| Ransomware | servex-us.com id6099 View details | Other | — | |||
|
servex-us.com |
||||||
| Ransomware | uhloans.com id6098 View details | Services | — | |||
|
Our knowledge of the local market, ability to offer custom solutions, and commitment to personal service are just a few reasons why our clients choose United Home Loans. We continue to grow by exceeding expectations every day. |
||||||
| Ransomware | cezam.net id6097 View details | Belgium | Energy | — | ||
|
Cezam SA manufactures carpentry products. The Company offers a range of aluminum and PVC doors and windows. Cezam conducts business in Belgium. |
||||||
| Ransomware | grouplease.co.th id6096 View details | Thailand | Services | — | ||
|
Group Lease Public Company Limited, together with its subsidiaries, provides hire purchase services and asset-backed loans to consumers in Thailand, Cambodia, Singapore, Laos, Indonesia, and Myanmar. The company offers hire purchase services and asse... |
||||||
| Ransomware | comacchio.com id6095 View details | Retail / E-commerce | — | |||
|
Comacchio has always strived to guarantee its customers the highest standards of efficiency and quality throughout the life of their equipment, from design to assembly and after-sales service. To maintain a high level of after-sales service we offer. |
||||||
| Ransomware | robovic.com id6094 View details | Services | — | |||
|
To offer effective solutions in the field of robotization, it is imperative to know and understand the different sectors of activity for which we work. At Robovic, we want to go beyond being simple generalists , which is why our team is made up of sp... |
||||||
| Ransomware | manfil.com.br id6092 View details | Brazil | Hospitality / Food & Beverage / Tourism | — | ||
|
Manfil Ferro e Aço started its activities in 2000 under the name of Coferpa Ferro e Aço and with 21 years in the market, it currently offers its customers a structure with 10,000 m² of built area, 25 mts scale for 100 ton, service rebar frame with hi... |
||||||
| Ransomware | arcc.org id6091 View details | Education | — | |||
|
The mission of ARCC is to provide services, deliver training, and promote innovation to support our regions school districts. |
||||||
| Ransomware | fiamma.com.my id6075 View details | Malaysia | Communication / Marketing | — | ||
|
Fiamma has more than 40 years experience in the distribution of electrical home appliances. From the distribution of cooking range of home appliances initially, its range of products now include home laundry, air conditioners, refrigerators, freezers... |
||||||
| Ransomware | agp.ph id6074 View details | Philippines | Construction / Real Estate | — | ||
|
Our services include project development, engineering, procurement, construction and commissioning for onshore and offshore gas infrastructure, LNG logistics, LNG marketing and distribution of natural gas to the power, industrial, commercial, transpo... |
||||||
| Ransomware | gregoire.fr id6073 View details | France | Communication / Marketing | — | ||
|
GREGOIRE involved in AI-SPRINT European project AI IN SECURE PRIVACY-PRESERVING COMPUTING CONTINUUM Wine Sprayer Olive Services Parts Choose GRÉGOIRE oriGinal parts: the guarantee of reliability and quality for your equipment By using GRÉGOIRE oriGin... |
||||||
| Ransomware | disltd.ca id6072 View details | Canada | Manufacturing / Engineering | — | ||
|
A software systems developer and distributor of a complete DMS System for the automotive dealership. DIS is IBM HW Certified and Microsoft Gold Partner Certified. |
||||||
| Ransomware | artri.net id6071 View details | Romania | Communication / Marketing | — | ||
|
The Romanian Association for International Road Transport (ARTRI) is a non-governmental, non-profitable, independent, community interest professional organization, a private law legal entity, whose members are mainly goods transport operators.ARTRI... |
||||||
| Ransomware | euromotors.com.pe id6070 View details | Peru | Retail / E-commerce | — | ||
|
The Euromotors Group is made up of 12 companies: Euromotors, Euroshop, Altos Andes, Euro Camiones, San Bartolomé, Eurorenting, Euroinmuebles, One, Eurolift, Revo Motors, Euroconnect and International Camiones del Perú. |
||||||
| Ransomware | aek.mk id6066 View details | North Macedonia | Communication / Marketing | — | ||
|
We create favourable conditions for the effective and sustainable competition on the electronic communications market to serve the interests of the users, business society and communications industry, through effective, transparent, proportionate and... |
||||||
| Ransomware | mundocuervo.com id6065 View details | Communication / Marketing | — | |||
|
Tequila is a Jalisco product that is part of our national identity. Synonymous with this is our prestigious and recognized Casa Tequilera Jose Cuervo, a company with more than 250 years of history and tradition, which has managed to cross borders, ex... |
||||||
| Ransomware | baysideinteriors.com id6059 View details | Services | — | |||
|
Bayside started in 1984 as a Northern California family owned and operated business, offering services in Southern California since 2006. Nearly 40 years later, we have proudly grown to serve customers across the nation and around the globe. Headquar... |
||||||
| Ransomware | sxi.com.ph id6049 View details | Philippines | Communication / Marketing | — | ||
|
We take great pride in offering globally competitive solutions that are proudly Filipino-made. What drives us? Our goal is to become the bank's trusted partner for digital transformation by providing out of the box solutions that meet the evolving ne... |
||||||
| Ransomware | 123.com id6048 View details | Other | — | |||
|
323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 323232Q 32... |
||||||
| Ransomware | baughmanco.com id6047 View details | Communication / Marketing | — | |||
|
In 1930, Clyde Baughman founded Baughman (pronounced BOFF-man) with the goal of creating an honest, reliable company that would make a difference. When Clyde planted the company’s roots in Wichita, he had bigger ambitions than to simply become succes... |
||||||
| Ransomware | bhrcorp.org id6040 View details | Healthcare / Pharma | — | |||
|
Founded in 1999 by President and Chief Executive Officer Neisha Becton, M.A., Becton Healthcare Resources, Inc. has built an impressive record of achievement and performance. BHR has steadily grown from a startup company into now over a decade of... |
||||||
| Ransomware | nautic.com id6032 View details | Services | — | |||
|
Nautic’s mission is to support the long-term value creation of our portfolio companies while preserving the strong culture that makes us attractive to our management teams, employees, and other business relationships. To accomplish this, our investme... |
||||||
| Ransomware | turncommerce.com id6031 View details | Retail / E-commerce | — | |||
|
TurnCommerce is the parent company of a wide variety of Web properties. We primarily focus on the domain space. With deep technical expertise, powerful infrastructure, and strong support we provide complete solutions for domainers. |
||||||
| Ransomware | nestseekers.com id6030 View details | Construction / Real Estate | — | |||
|
Revenue: 1.3BNest Seekers International is a game-changing firm in the rapidly expanding global real estate marketplace. The firm's hybrid tech & brand enabled model has inspired a new wave of thinking in the industry, and its approach to daring... |
||||||
| Ransomware | tf-amd.com.my id6024 View details | Malaysia | Communication / Marketing | — | ||
|
TF-AMD Microelectronics (Penang) Sdn. Bhd. (formerly known as AMD Export Sdn. Bhd.) located in Penang, Malaysia is one of the state-of-art Assembly and Test service provider for high performance computing and communication solutions. As one of the pi... |
||||||
| Ransomware | tf-amd.com id6023 View details | Malaysia | Communication / Marketing | — | ||
|
TF-AMD Microelectronics (Penang) Sdn. Bhd. (formerly known as AMD Export Sdn. Bhd.) located in Penang, Malaysia is one of the state-of-art Assembly and Test service provider for high performance computing and communication solutions. As one of the pi... |
||||||
| Ransomware | olympia.org id6022 View details | Education | — | |||
|
Olympia Community Unified School District 16 contains 5 schools and 1,722 students. The district’s minority enrollment is 10%. |
||||||
| Ransomware | tvh.com id6017 View details | Manufacturing / Engineering | — | |||
|
You'll find the most extensive range of parts for material handling, industrial, construction and agricultural equipment. We continuously grow our offer, with more parts and accessories arriving every day. 95% same-day shipment We collaborate with lo... |
||||||
| Ransomware | omscomponents.it id6016 View details | Italy | Manufacturing / Engineering | — | ||
|
Da quarant’anni lavoriamo per farvi stare comodamente seduti.Siamo curiosi e creativi. Ci piacciono le sfide e vogliamo migliorarci ogni giorno. Questi tratti del nostro carattere guidano le nostre scelte e ci permettono di produrre per voi meccani... |
||||||
| Ransomware | masrl.com id6015 View details | Public Sector | — | |||
|
The company's founder Fausto Berti directs and coordinates sales and marketing department, purchasing department, an administrative and accounting department une a technical department consisting of 3 design engineers and CNC programmers. The structu... |
||||||
| Ransomware | garrottbros.com id6014 View details | Services | — | |||
|
Since 1950 the Garrott family has owned and operated the ready mix business in middle TN. Starting from just 2 mixers, Garrott Bros Ready Mix has grown into a multi plant and mixer operation. |
||||||
| Ransomware | thened.com id6012 View details | Hospitality / Food & Beverage / Tourism | — | |||
|
Situated in the heart of the City, in the former Midland Bank headquarters, The Ned houses Ned’s Club, a private members’ space, gym and rooftop, alongside a public spa, ten restaurants & bars and 250 hotel bedrooms.Located in The Johnston Building... |
||||||
| Ransomware | vernegroup.com id6011 View details | IT | — | |||
|
With more than 40 years of experience, Verne Technology Group has two business divisions, Verne TELCO and Verne TECH, covering the ICT sector. A project that, emulating Jules Verne, was born with the purpose of continuing to be visionaries of the... |
||||||
| Ransomware | errebielle.it id6003 View details | Italy | Manufacturing / Engineering | — | ||
|
Errebielle S.r.l. is an Italian company specializing in the production of doors and furniture accessories.Data leak contains 34 GB |
||||||
| Ransomware | revvaviation.com id6001 View details | Transportation / Travel / Logistics | — | |||
|
first part of data |
||||||
| Ransomware | p-and-r.com id5989 View details | Construction / Real Estate | — | |||
|
P&R Enterprises, Inc. was founded in 1968 and is headquartered just outside Washington, D.C. in Falls Church, Virginia. P&R is a Mid-Atlantic based building services contractor. In addition, P&R continues to be a pioneer in the implementation of Gree... |
||||||
| Ransomware | ativy.com id5986 View details | Communication / Marketing | — | |||
|
We build thecompanies of the futureWe have started our history as a cloud-based service provider, but soon we figured out that the sky is the limit. At Ativy, we work towards creating a more productive, efficient, and above all, more human tomorr... |
||||||
| Ransomware | etkinllc.com id5985 View details | Construction / Real Estate | — | |||
|
Etkin has played a prominent role in southeast Michigan real estate development for over 30 years. The privately owned company was formed in 1982 and is led today by principal Douglas Etkin and Chief Executive Officer Curtis Burstein. |
||||||
| Ransomware | 1.com id5982 View details | Other | leaked | |||
|
test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test t... |
||||||
| Ransomware | hacla.org [part 2] id5980 View details | Public Sector | — | |||
|
Update . more than 15TB of files The Housing Authority of the City of Los Angeles is a state-chartered public agency. Established in 1938, HACLA provides the largest stock of affordable housing in the city Los Angeles, California and is one of the... |
||||||
| Ransomware | groupe-seche.com id5975 View details | France | Manufacturing / Engineering | — | ||
|
Séché Environnement SA engages in the recovery and treatment of waste products for industrial and corporate customers, and local authorities in France and internationally. more than 300 gigabytes of documents, including personal data. |
||||||
| Ransomware | theus-industries.fr id5973 View details | France | Communication / Marketing | — | ||
|
THEUS INDUSTRIES, est le prolongement d’un atelier de chaudronnerie créé en 1892. Elle est l’héritière de plus de cent années d’expérience dans le travail de l’acier. Tous les produits FOCUS CREATION sont fabriqués ici, à Cavaillon, au cœur du parc n... |
||||||
| Ransomware | tharworx.com id5972 View details | Communication / Marketing | — | |||
|
in three days we will lay out 3 GB, if representatives of tharworx.com company do not contact us, we will lay out another 20 GB |
||||||
| Ransomware | psenergy.com id5964 View details | Energy | — | |||
|
Founded in 1985, PS Energy Group, Inc. is a privately-owned, Atlanta-based corporation and one of the nation’s top diversity and woman-owned businesses. We are an energy expert and a premier partner to Fortune 500 companies and governments — strateg... |
||||||
| Ransomware | hammondlumber.com id5963 View details | Communication / Marketing | — | |||
|
Downloaded files > 230gb: Central 93gb, DownEast 67gb, EmpBackup01 24gb, HlcProfile2 15gb(Personal folders), Northern 12gb.Central, DownEast, Northern - city offices by direction, in cities Personal folders. Hammond Lumber Company was founded i... |
||||||
| Ransomware | nts.go.kr id5962 View details | Korea, Republic of | Other | — | ||
|
No additional victim description available. |
||||||
| Ransomware | grupcovesa.com id5939 View details | Hospitality / Food & Beverage / Tourism | — | |||
|
concesionario oficial Ford Barcelona y Girona, encontrarás la mejor selección de vehículos seminuevos y de ocasión, así como todos los coches Ford. |
||||||
| Ransomware | swiftatlanta.com id5938 View details | United States | Manufacturing / Engineering | — | ||
|
Swift Atlanta was founded in Suwanee, Georgia in 1982. The business began as a manufacturer of high quality custom sheet metal components and assemblies serving the electronic and communications industries. |
||||||
| Ransomware | tecnosysitalia.eu id5936 View details | Construction / Real Estate | — | |||
|
Tecnosys Italia S.r.l. is a company operating throughout the national territory for over 30 years, in the creation of highly specialized software in the sectors of Real Estate Management, ERP Systems, Document Repository, Process Reengineering (BPR),... |
||||||
| Ransomware | piramal.com id5935 View details | India | Healthcare / Pharma | — | ||
|
The Piramal Group is an Indian multinational conglomerate that has presence across various sectors such as healthcare, life sciences, drug discovery, financial services, alternative investment and real estate |
||||||
| Ransomware | islandinsurance.ca id5928 View details | Canada | Finance / Legal / Insurance | — | ||
|
Island Insurance is owned and operated by Gurpreet Khaira, Balwinder Khaira, and Harjinder Basra. Staff consists of level 2 brokers and have over 50 years of combined experience in the insurance business. |
||||||
| Ransomware | lqtbg.com.cn id5927 View details | China | Other | — | ||
|
No additional victim description available. |
||||||
| Ransomware | ita-moulding-process.com id5926 View details | Communication / Marketing | — | |||
|
ITA MOULDING PROCESS, specialist in wood and foam molding, offers you a complete and diversified offer. Whatever your sector of activity, ITA MOULDING PROCESS adapts to your needs by making you benefit from its expertise. |
||||||
| Ransomware | ulmacarretillas.com id5925 View details | Communication / Marketing | — | |||
|
With almost 40 years of experience, at ULMA Servicios de Manutención we offer the appropriate comprehensive logistics solution for all kinds of storage needs from different clients and sectors. Our in-depth knowledge of the handling and distribution... |
||||||
| Ransomware | mcna.net id5922 View details | Healthcare / Pharma | — | |||
|
MCNA Dental (MCNA Insurance Company and Managed Care of North America, Inc.) is a leading dental benefits manager committed to providing high quality services to state agencies and managed care organizations for their Medicaid, Children's Health Insu... |
||||||
| Ransomware | giga.com.vc id5909 View details | Saint Vincent and the Grenadines | Retail / E-commerce | — | ||
|
Founded in 2009, GIGA Atacado is a wholesale network with 11 stores and a Distribution Center in the state of São Paulo, present in the capital and the cities of Barueri, Carapicuíba, Cotia, Jundiaí, Guarulhos, Osasco and Várzea Paulista. It has abou... |
||||||
| Ransomware | jubileeinsurance.com id5908 View details | Uganda | Finance / Legal / Insurance | — | ||
|
Jubilee Insurance is the number one insurer in East Africa and is the only ISO certified insurance group listed on the Nairobi Securities Exchange, Dar es Salaam Stock Exchange and Uganda Securities Exchange. Jubilee Insurance was established in 1937... |
||||||
| Ransomware | slipstreaminc.org id5898 View details | Energy | — | |||
|
Slipstream creates, tests, delivers and scales the next generation of energy efficiency and renewable energy programs that move us farther, faster toward a clean energy economy. |
||||||
| Ransomware | precisionit.co.in id5897 View details | India | Communication / Marketing | — | ||
|
Established in 1996, Precision provides Biometric, IoT, Cloud & Systems Integration solutions and IT Infrastructure Management Services. Precision adopts a consulting approach to address the needs of clients and has a very strong R&D and IP creation... |
||||||
| Ransomware | demechindia.com id5896 View details | India | Communication / Marketing | — | ||
|
Deccan Mechanical and Chemical Industries Private Limited (DEMECH) is an ISO 9001:2015 certified company that was established in 1969 by the late Mr. K R Natu. Today, we have a trans-continental presence, serving clients both in India and overseas. O... |
||||||
| Ransomware | securens.in id5885 View details | India | Services | — | ||
|
Securens has provided leading brands with various security surveillance system, safety and in-camera audit services including Alarm monitoring Services, Perimeter Intrusion detection system, in-camera virtual guard patrol, instantly detecting PPE non... |
||||||
| Ransomware | bianchiindustry.com id5876 View details | Manufacturing / Engineering | — | |||
|
We are pleased to introduce you two company www.bianchivending.com and www.bianchiindustry.com. They say these are group.Quick overview.Since it was founded in 1959, Bianchi Industry’s industrial strategy has always focused on the future. Und... |
||||||
| Ransomware | cabinet-paillet.fr id5808 View details | France | Other | — | ||
|
accountants.people trusted their personal data and no one monitored security |
||||||
| Ransomware | mangiainc.com id5806 View details | Italy | Communication / Marketing | — | ||
|
Mangia, Inc.™ is an Italian producer and exporter of Italian tomatoes and beans produced in Italy and sold through food service & retail distributors. |
||||||
| Ransomware | stolt-nielsen.com id5805 View details | Communication / Marketing | — | |||
|
We are the world’s largest operator of sophisticated chemical tankers, a global provider of safe storage services for bulk liquids, and the leading provider of door-to-door transportation services for bulk-liquid chemicals and food-grade products. We... |
||||||
| Ransomware | alyasrafoods.com id5803 View details | Saudi Arabia | Agriculture / Food | — | ||
|
Since 1988, Alyasra Foods has been distributing some of Kuwait's favorite foods in retail as well as food service. Today Alyasra Foods proudly operates in Kuwait, Iraq, and Saudi Arabia, distributing foods to thousands of valued customers daily.I... |
||||||
| Ransomware | oaklandca.gov id5802 View details | United States | Public Sector | — | — | |
|
Founded in 1852, Oakland, located in the U.S. state of California, is a West Coast port city. Oakland is the county seat of Alameda County. |
||||||
| Ransomware | co.ottawa.oh.us id5801 View details | United States | Public Sector | — | — | |
|
Regional Government in Port Clinton, Ohio |
||||||
| Ransomware | cityofallenpark.org id5800 View details | Public Sector | — | — | ||
|
first part of data |
||||||
| Ransomware | ksrsac.karnataka.gov.in id5799 View details | India | Communication / Marketing | — | — | |
|
Karnataka State Remote Sensing Applications Centre (KSRSAC) was established in the year 1986 and designated as the Nodal Agency for implementation of Remote Sensing (including Photogrammetry) and GIS programmes in the State. The KSRSAC will be the re... |
||||||
| Ransomware | roslevauto.dk id5798 View details | Denmark | Other | — | — | |
|
Roslev Auto, Auto- & Traktorservice, is a reputable company that has sold, repaired and serviced cars and tractors in Roslev and the surrounding area since 1971.Behind Roslev Auto stands Kjeld Pedersen, who has been the owner and manager of the wor... |
||||||
| Ransomware | gproulxinc.com id5797 View details | Communication / Marketing | — | — | ||
|
For more than 45 years, G. Proulx Inc. has been serving the construction industry in the Montreal area. Our activities are concentrated in the commercial, industrial, institutional and residential supply. We are confident that we can meet any of... |
||||||
| Ransomware | Zeus Energy S.A.C id5796 View details | Peru | Energy | — | — | |
|
Zeus Energy S.A.C. (Zeus Energy), a company operating mainly in the Electric Power sector. The company has operations in Peru, which include Construction Contractor Company. |
||||||
| Ransomware | jenparking.com id5795 View details | Communication / Marketing | — | — | ||
|
We are committed to developing parking.with experience expertise and professional serviceto maximize the potential of space utilization"Thinking to improve every need of a parking lot" |
||||||
| Ransomware | transports-douaud.com id5794 View details | Transportation / Travel / Logistics | — | |||
|
For 80 years, Transports Douaud, Piveteau, Herbert, Charpentier and Perocheau have built your transport solutions step by step.The Douaud Group places its employees, partners & customers at the center of its strategy in order to create transport so... |
||||||
| Ransomware | bakermech.com id5793 View details | Communication / Marketing | — | — | ||
|
Baker Mechanical Inc. is a family-oriented company that prides itself on ensuring unsurpassed customer satisfaction.Centrally located in eastern North Carolina, BMI can handle any size mechanical project in the region. BMI is dedicated to preserving... |
||||||
| Ransomware | the3rivers.net id5792 View details | Education | — | — | ||
|
The Three Rivers Learning Trust was established in 2011 and consists of eight Schools. These schools have a long and proud history of providing an excellent education service to the local population. |
||||||
| Ransomware | emotorsdirect.ca id5785 View details | Canada | Manufacturing / Engineering | — | ||
|
Shop the largest selection of industrial motors, controls, and gear reducers in Canada. We deliver to every postal code in Canada. We specialize in getting you the best product for the job - as fast as possible. You need the right motor, and you... |
||||||
| Ransomware | telepizza.com id5783 View details | Spain | Hospitality / Food & Beverage / Tourism | — | ||
|
Telepizza is a pizza restaurant chain that operates mainly in Spain and Portugal and some Spanish-speaking countries. |
||||||
| Ransomware | jaureguy.com.ar id5780 View details | Argentina | Transportation / Travel / Logistics | — | ||
|
Jaureguy S.A.C. I. y A. is a company with more than 20 years of experience making and selling soda in disposable siphons.Jaureguy has their own fleet for the logistics of their products and a Distribution Center located in San Justo, La Matanza, Bu... |
||||||
| Ransomware | stavinvest.cz id5779 View details | Czechia | Communication / Marketing | — | ||
|
We are a building supply store that specializes in roofing materials and services.Our products include roofing, insulation, gutters, and battens. Therefore, pretty much anything roof-related.STAV-INVEST was founded in 1992. We have come a lon... |
||||||
| Ransomware | bbsautomation.com id5778 View details | Communication / Marketing | — | |||
|
BBS Provides InnovativeAdvanced Engineering WorldwideBBS is committed to providing engineering solutions which are not only financially feasible and structurally sound, but help improve safety, reliability and profitability. At BBS, assembly auto... |
||||||
| Ransomware | hitzler-ingenieure.de id5777 View details | Germany | Construction / Real Estate | — | ||
|
The world is changing - and we with it.The German construction industry is facing the greatest upheaval in its history. The megatrends of digitization and sustainability will fundamentally change the industry. And require continuously growing know-... |
||||||
| Ransomware | id-logistics.com id5776 View details | Taiwan, Province of China | Transportation / Travel / Logistics | — | ||
|
After the launch in France of logistics services for mass distribution, our Group begins its international deployment with a first subsidiary in Taiwan in early 2002. This would be followed by the opening of a new country every year… |
||||||
| Ransomware | spoormaker.co.za id5771 View details | South Africa | Other | — | ||
|
SPOORMAKER AND PARTNERS INC - REGISTRATION (CIPC NO): 1981/008290/21. Consultations on mechanics, electrics, fire fighting and sanitation. Designing. There are more than 350Gb of confidential data |
||||||
| Ransomware | kaycan.com id5768 View details | Communication / Marketing | — | |||
|
Home is where we hang our hat at the end of the day and put up our feet up after a long day’s work. It’s no wonder why we take pride in where we live and want our home to reflect our personal style. Kaycan products offer unparalleled performance, mul... |
||||||
| Ransomware | boothtransport.com id5766 View details | Australia | Transportation / Travel / Logistics | — | ||
|
Booth is one of Australia's most respected national freight and logistics service providers. Our national fleet of transport equipment, warehousing facilities and professional staff are supported by industry specific operational systems. This deliver... |
||||||
| Ransomware | r-pac.com id5756 View details | Other | — | |||
|
korea |
||||||
| Ransomware | perfectplacement.co.uk id5755 View details | United Kingdom | Communication / Marketing | — | ||
|
recruitment agency |
||||||