Ransomware Group intelligence
Lockbit3
InactiveTrack Lockbit3 with 2022 published victims and 42 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Lockbit3 is tracked by Breach House as a ransomware group with 2022 published victims.
United States is currently the most targeted country in this dataset.
42 known leak locations are currently associated with this group.
Leak Status Distribution
26
- Leaked 10 38.5%
- Pending 16 61.5%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (42)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 27 | Onion service | Up checked 4h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 29 | Onion service | Up checked 4h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 39 | Onion service | Up checked 4h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 42 | Onion service | Down checked 4h ago | lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion |
| Leak location 41 | Onion service | Down checked 4h ago | lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43foocwmrzsokumqid.onion |
| Leak location 40 | Onion service | Down checked 4h ago | lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion |
| Leak location 35 | Onion service | Down checked 4h ago | lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion |
| Leak location 38 | Onion service | Down checked 4h ago | lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion |
| Leak location 37 | Onion service | Down checked 4h ago | lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion |
| Leak location 36 | Onion service | Down checked 4h ago | lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion |
| Leak location 34 | Onion service | Down checked 4h ago | lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion |
| Leak location 33 | Onion service | Down checked 4h ago | lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion |
| Leak location 32 | Onion service | Down checked 4h ago | lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion |
| Leak location 31 | Onion service | Down checked 4h ago | lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion |
| Leak location 30 | Onion service | Down checked 4h ago | lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion |
| Leak location 28 | Onion service | Down checked 4h ago | ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion |
| Leak location 26 | Onion service | Down checked 4h ago | lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion |
| Leak location 24 | Onion service | Down checked 4h ago | lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion |
| Leak location 25 | Onion service | Down checked 4h ago | lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion |
| Leak location 23 | Onion service | Down checked 4h ago | lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion |
| Leak location 21 | Onion service | Down checked 4h ago | lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion |
| Leak location 22 | Onion service | Down checked 4h ago | lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion |
| Leak location 20 | Onion service | Down checked 4h ago | lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion |
| Leak location 19 | Onion service | Down checked 4h ago | lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion |
| Leak location 17 | Onion service | Down checked 4h ago | lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion |
| Leak location 18 | Onion service | Down checked 4h ago | lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion |
| Leak location 16 | Onion service | Down checked 4h ago | lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion |
| Leak location 15 | Onion service | Down checked 4h ago | lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion |
| Leak location 14 | Onion service | Down checked 4h ago | lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion |
| Leak location 12 | Onion service | Down checked 4h ago | lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion |
| Leak location 13 | Onion service | Down checked 4h ago | lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion |
| Leak location 9 | Onion service | Down checked 4h ago | lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion |
| Leak location 11 | Onion service | Down checked 4h ago | lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion |
| Leak location 8 | Onion service | Down checked 4h ago | lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion |
| Leak location 7 | Onion service | Down checked 4h ago | lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion |
| Leak location 6 | Onion service | Down checked 4h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 10 | Onion service | Down checked 4h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 5 | Onion service | Down checked 4h ago | lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion |
| Leak location 4 | Onion service | Down checked 4h ago | lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion |
| Leak location 3 | Onion service | Down checked 4h ago | lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion |
| Leak location 2 | Onion service | Down checked 4h ago | lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion |
| Leak location 1 | Onion service | Down checked 4h ago | lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion |
Top Activity Sectors (17)
- Not identified 462
- Communication / Marketing 418
- Services 158
- Manufacturing / Engineering 144
- Finance / Legal / Insurance 141
- Healthcare / Pharma 108
- Education 92
- Construction / Real Estate 76
- IT 73
- Energy 69
- Public Sector 65
- Retail / E-commerce 57
- Transportation / Travel / Logistics 52
- Hospitality / Food & Beverage / Tourism 35
- Agriculture / Food 31
- Telecommunications 24
- NGOs / Associations 13
Typical Attacks (34)
▼How Lockbit3 typically operates, as attributed by MITRE ATT&CK v19.2. Attributed via LockBit 3.0.
-
What they do: LockBit 3.0 can use a compromised local account for lateral movement.
What that means: Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1059.001 PowerShell Execution
What they do: LockBit 3.0 can use PowerShell to apply Group Policy changes.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: LockBit 3.0 has the ability to directly call native Windows API items during execution.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
T1569.002 Service Execution Execution
What they do: LockBit 3.0 can use PsExec to execute commands and payloads.
What that means: Adversaries may abuse the Windows service control manager to execute malicious commands or payloads.
-
What they do: LockBit 3.0 can change the Registry values for Group Policy refresh time, to disable SmartScreen, and to disable Windows Defender.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
What they do: LockBit 3.0 can install system services for persistence.
What that means: Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence.
-
What they do: LockBit 3.0 can enable automatic logon through the `SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon` Registry key.
What that means: Adversaries may abuse features of Winlogon to execute DLLs and/or executables when a user logs in.
-
What they do: LockBit 3.0 can enable options for propogation through Group Policy Objects.
What that means: Adversaries may modify Group Policy Objects (GPOs) to subvert the intended discretionary access controls for a domain, usually with the intention of escalating privileges on the domain.
-
T1548.002 Bypass User Account Control Privilege Escalation
What they do: LockBit 3.0 can bypass UAC to execute code with elevated privileges through an elevated Component Object Model (COM) interface.
What that means: Adversaries may bypass UAC mechanisms to elevate process privileges on system.
-
T1027.002 Software Packing Stealth
What they do: LockBit 3.0 can use code packing to hinder analysis.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1027.013 Encrypted/Encoded File Stealth
What they do: The LockBit 3.0 payload includes an encrypted main component.
What that means: Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.
-
T1070.004 File Deletion Stealth
What they do: LockBit 3.0 can delete itself from disk.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1140 Deobfuscate/Decode Files or Information Stealth
What they do: The LockBit 3.0 payload is decrypted at runtime.
What that means: Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis.
-
T1218.003 CMSTP Stealth
What they do: LockBit 3.0 can attempt a CMSTP UAC bypass if it does not have administrative privileges.
What that means: Adversaries may abuse CMSTP to proxy execution of malicious code.
-
T1480 Execution Guardrails Stealth
What they do: LockBit 3.0 can make execution dependent on specific parameters including a unique passphrase and the system language of the targeted host not being found on a set exclusion list.
What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
-
T1480.002 Mutual Exclusion Stealth
What they do: LockBit 3.0 can create and check for a mutex containing a hash of the `MachineGUID` value at execution to prevent running more than one instance.
What that means: Adversaries may constrain execution or actions based on the presence of a mutex associated with malware.
-
What they do: LockBit 3.0 can check heap memory parameters for indications of a debugger and stop the flow of events to the attached debugger in order to hinder dynamic analysis.
What that means: Adversaries may employ various means to detect and avoid debuggers.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: LockBit 3.0 can disable security tools to evade detection including Windows Defender.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1685.005 Clear Windows Event Logs Defense Impairment
What they do: LockBit 3.0 can delete log files on targeted systems.
What that means: Adversaries may clear Windows Event Logs to hide the activity of an intrusion.
-
T1688 Safe Mode Boot Defense Impairment
What they do: LockBit 3.0 can reboot the infected host into Safe Mode.
What that means: Adversaries may abuse Windows safe mode to disable endpoint defenses.
-
T1057 Process Discovery Discovery
What they do: LockBit 3.0 can identify and terminate specific services.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1082 System Information Discovery Discovery
What they do: LockBit 3.0 can enumerate system hostname and domain.
What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
-
T1083 File and Directory Discovery Discovery
What they do: LockBit 3.0 can exclude files associated with core system functions from encryption.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1120 Peripheral Device Discovery Discovery
What they do: LockBit 3.0 has the ability to discover external storage devices.
What that means: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.
-
T1135 Network Share Discovery Discovery
What they do: LockBit 3.0 can identify network shares on compromised systems.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1614.001 System Language Discovery Discovery
What they do: LockBit 3.0 will not affect machines with language settings matching a defined exlusion list of mainly Eastern European languages.
What that means: Adversaries may attempt to gather information about the system language of a victim in order to infer the geographical location of that host.
-
T1680 Local Storage Discovery Discovery
What they do: LockBit 3.0 can enumerate local drive configuration.
What that means: Adversaries may enumerate local drives, disks, and/or volumes and their attributes like total or free space and volume serial number.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: LockBit 3.0 can use SMB for lateral movement.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1071.001 Web Protocols Command and Control
What they do: LockBit 3.0 can use HTTP to send victim host information to C2.
What that means: Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic.
-
T1132.001 Standard Encoding Command and Control
What they do: LockBit 3.0 can Base64-encode C2 communication.
What that means: Adversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect.
-
T1573.001 Symmetric Cryptography Command and Control
What they do: LockBit 3.0 can encrypt C2 communications with AES.
What that means: Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol.
-
T1486 Data Encrypted for Impact Impact
What they do: LockBit 3.0 can encrypt targeted data using the AES-256, ChaCha20, or RSA-2048 algorithms.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: LockBit 3.0 can terminate targeted processes and services related to security, backup, database management, and other applications that could stop or interfere with encryption.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: LockBit 3.0 can delete volume shadow copies.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (51)
▼Software Lockbit3 has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
Gosecretsdump
LaZagne
LostMyPassword
Mimikatz
NirSoft ExtPassword
PasswordFox
ProcDump
Veeam-Get-Creds
Defense evasion
Backstab/Process Explorer driver (BYOVD)
Defender Control
GMER
PCHunter
PowerTool
ProcessHacker
TDSSKiller
Discovery & enumeration
AdFind
Advanced IP Scanner
Advanced Port Scanner
Bloodhound
Seatbelt
SoftPerfect NetScan
Exfiltration
Anonfiles
FileZilla
FreeFileSync
File[.]io
MEGA
RClone
Sendspace
Temp[.]sh
Tempsend
Transfert-my-files
Transfer[.]sh
WinSCP
LOLBAS (living-off-the-land binaries)
BCDEdit
PsExec
Networking & tunnelling
Ligolo
Ngrok
Plink
Offensive security tooling
Cobalt Strike
Impacket
Koadic
Metasploit
PowerShell Empire
ThunderShell
Remote monitoring & management
Action1
AnyDesk
FixMeIt
ScreenConnect
Splashtop
TeamViewer
ZohoAssist
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Victims (2022)
Search, filter and paginate the victim timeline for Lockbit3. Showing 1401–1500 of 2022.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | gdz.com id5754 View details | United States | Transportation / Travel / Logistics | — | ||
|
Fully integrated shipping line software. Provides a complete platform for managing the commercial and operational aspects of ocean carriers and agents.As a result of the attack on the this company, we also attacked its customers. In addition to the... |
||||||
| Ransomware | regaltax.us id5745 View details | United States | Services | — | ||
|
Regal Tax Advisory Group has been in business for more than 14 years. We are proud to say that we have delivered satisfaction and excellence, not just in Doral, FL and Miramar, FL, but also throughout the United States. The services we provide are al... |
||||||
| Ransomware | waldogeneral.com id5744 View details | Services | — | |||
|
Waldo General, Inc. is a management company specializing in the management of Associated Business Units; most of which operate in the financial services industry. Waldo General, Inc.'s portfolio of businesses that it manages include storefront consum... |
||||||
| Ransomware | mandirisekuritas.co.id id5743 View details | Indonesia | Communication / Marketing | — | — | |
|
Mandiri Sekuritas merupakan mitra investasi tepercaya yang menyediakan solusi pasar modal komprehensif dengan beragam produk dan layanan unggulan |
||||||
| Ransomware | meatel.com id5742 View details | Communication / Marketing | — | |||
|
Established in 1977, Meatel is a leading innovative Telecommunication, ICT and security provider and Integrator for the Public and the Private Sectors, including fixed and mobile operators. We offer a suite of services and solutions from design, supp... |
||||||
| Ransomware | buehnen.de id5741 View details | Germany | Hospitality / Food & Beverage / Tourism | — | ||
|
Wenn wir Ihr Ziel kennen, stellen wir die richtigen Fragen und liefern das optimale Ergebnis für eine sichere und optimale Klebung Ihrer Komponenten. Für uns stehen nicht unsere Produkte im Fokus, sondern das belastbar beste Ergebnis für unsere Kunde... |
||||||
| Ransomware | radium.com.tw id5740 View details | Taiwan, Province of China | Retail / E-commerce | — | ||
|
Radium Life Technology Co., Ltd. is developing real estate projects in Taiwan. It develops and operates the T9 BOT project, which consists of a bus terminal, four residential buildings, two office towers, a shopping mall, a hotel, and a movie theater |
||||||
| Ransomware | ktcs.com.my id5739 View details | Malaysia | Manufacturing / Engineering | — | ||
|
Kilang Tin Can (Sel) Sdn Bhd (雪蘭莪製罐廠有限公司), incorporated in 1976, is a metal can manufacturing company located at Jalan Haji Sirat, Klang, Selangor. |
||||||
| Ransomware | essendant.com id5709 View details | Retail / E-commerce | — | — | ||
|
Essendant, formerly known as United Stationers, is a national wholesale distributor of office supplies, with consolidated net sales of $5.3 billion. Essendant stocks over 160,000 items including traditional office products, office furniture, janitori... |
||||||
| Ransomware | dmos.com id5707 View details | Communication / Marketing | — | — | ||
|
Data Volume: 278.69 GBContents: scans, purchasing information, marketing information, contracts, insurance documents, and moreSince 1955 DMOS Orthopaedic Centers has been leading the way, providing innovative quality care to patients of Central... |
||||||
| Ransomware | fiege.com id5706 View details | Construction / Real Estate | — | — | ||
|
259gb stolen dataIntegrated solutions including logistics, digital services, real estate and venture business.We are innovation leaders in logistics. With our modular concepts in logistics, digital services, real estate and enterprises, we opti... |
||||||
| Ransomware | workplace.org id5700 View details | Communication / Marketing | — | |||
|
The WorkPlace was originally incorporated as the Private Industry Council of Southern Connecticut on August 11, 1983. Today, we conduct comprehensive planning, and coordinate regional and state-wide workforce development programs to prepare people f... |
||||||
| Ransomware | sabena-engineering.com id5699 View details | Manufacturing / Engineering | — | |||
|
Sabena Engineering is your reference for Maintenance, Repair, Overhaul & Upgrades. We support airlines and air forces around the globe. With our experienced engineers, technicians and mechanics, your fleet is in safe hands. We will attach proofs of... |
||||||
| Ransomware | hendrickcorp.com id5697 View details | Manufacturing / Engineering | — | |||
|
Hendrick's customer service, engineering capabilities and manufacturing expertise are second to none. Our commitment to lean manufacturing methods is a testament to our dedication to providing our customers the best product. With 145+ years of manufa... |
||||||
| Ransomware | maximumind.com id5696 View details | Construction / Real Estate | — | |||
|
I would say we were lucky if SPACE-X contractors were more talkative.But I think this material will find its buyer as soon as possible.Elon Musk we will help you sell your drawings to other manufacturers - build the ship faster and fly away.... |
||||||
| Ransomware | plasticproductsco.com id5694 View details | Manufacturing / Engineering | — | — | ||
|
Founded in 1962, Plastic Products is a company that specializes in providing plastic, metal, and ceramic injection molding services. |
||||||
| Ransomware | eprinsa.es id5672 View details | Spain | Communication / Marketing | — | — | |
|
Eprinsa is a public company created by the Diputación de Córdoba with the aim of providing comprehensive computer assistance, staff training and cartographic production. |
||||||
| Ransomware | favoritefoods.com id5671 View details | Agriculture / Food | — | — | ||
|
The Mission of Favorite Foods is to provide quality products, superior service and innovative solutions to a select group of customers, and to make a significant contribution to their success. We strive to create mutually profitable long term relatio... |
||||||
| Ransomware | cktc.edu id5670 View details | United States | IT | — | — | |
|
CKTC was one of the first technology centers in the state. Contractors completed construction on building 100 in September 1968, and Caddo Kiowa Technology Center opened its doors to the public for the first time that year. CKTC offered 11 programs t... |
||||||
| Ransomware | omegaservicos.com.br id5669 View details | Brazil | Energy | — | — | |
|
The Omega Group develops customized solutions for your business |
||||||
| Ransomware | inphenix.com id5668 View details | Healthcare / Pharma | — | — | ||
|
Inphenix designs and manufactures lasers and light sources that are critical in state of the art applications in the medical, telecom, sensing and measurement industries. |
||||||
| Ransomware | cqservice.sk id5667 View details | Slovakia | IT | — | — | |
|
Spoločnosť CQ service, spol. s r.o. pôsobí na trhu informačných technológií už od roku 1992. Po úvodných rokoch dodávok výpočtovej techniky sa začala orientovať aj na poskytovanie služieb spojených s výpočtovou technikou. |
||||||
| Ransomware | brandywine-homes.com id5666 View details | Other | — | — | ||
|
Brandywine Homes is the builder of choice throughout Southern California, creating extraordinary homes built to last today and for generations to come. |
||||||
| Ransomware | meinet.com id5665 View details | Services | — | — | ||
|
ManagementExcellence, Inc. (MEI) has a solid track record in providing management services to membership organizations, bringing a unique set of skills and expertise to the table. We work in conjunction with several strategic partners who have specif... |
||||||
| Ransomware | lubrimetal.com id5664 View details | Manufacturing / Engineering | — | — | ||
|
Lubrimetal is a chemical company specializing in the production of lubricants and other chemicals for wire drawing and metal surface treatment. |
||||||
| Ransomware | greggardnergm.com id5663 View details | Retail / E-commerce | — | — | ||
|
Shopping for a new or pre-owned GM vehicle? Shop for GMC, Buick, and Chevrolet models at Greg Gardner Motors, located in Squamish, BC. |
||||||
| Ransomware | wyckoffcomfort.com id5662 View details | Other | — | — | ||
|
Wyckoff Heating & Cooling is always growing. |
||||||
| Ransomware | bonta-viva.it id5661 View details | Italy | Other | — | — | |
|
Bonta Viva's authentic Italian cow milk cheese made from mozzarella and cream |
||||||
| Ransomware | grupohospitalarvidas.com.br id5660 View details | Brazil | Healthcare / Pharma | — | — | |
|
Hospital e Maternidade Vidas is a company that operates in the Hospital & Health Care industry. |
||||||
| Ransomware | schradercamargo.com id5659 View details | Manufacturing / Engineering | — | — | ||
|
Founded in 1963, Schrader Camargo is an engineering, procurement, and construction company. Other services Schrader Camargo offers include civil works, electromechanical assemblies, and operation and maintenance in the hydrocarbons |
||||||
| Ransomware | kisp.com id5658 View details | Canada | Telecommunications | — | — | |
|
KiSP creates, develops and provides client-facing solutions to manufacturers, dealers, interior designers and customers in the office furniture industry. Founded in 1993, KiSP is headquartered in Toronto, Canada, with additional offices in Costa... |
||||||
| Ransomware | wunan.org.au id5657 View details | Australia | Construction / Real Estate | — | — | |
|
Wunan is an Aboriginal development organisation in the East Kimberley region of Western Australia. Wunan operates with a clear purpose and strategy to drive long-term socio- economic change for Aboriginal people by providing real opportunities, inves... |
||||||
| Ransomware | alpes-sante-travail.org id5656 View details | Communication / Marketing | — | — | ||
|
Alpes Santé Travail est constitué en association loi 1901, au service de 4 700 entreprises adhérentes et 63 000 salariés, soumis à un renouvellement d’agrément tous les 5 ans par la DREETS.Notre agrément a été renouvelé le 19 janvier 2020 pour l’en... |
||||||
| Ransomware | schauenburg.com id5655 View details | Canada | Communication / Marketing | — | — | |
|
Schauenburg Industries Ltd. of North Bay, Ontario, Canada, is a Schauenburg Group company. Founded in 1969 in the heart of Canada's mining district, the company continues to supply products to the mining, tunneling, forestry and other industries. |
||||||
| Ransomware | heidelbergbread.com id5654 View details | Communication / Marketing | — | — | ||
|
At Heidelberg Bread Company we promise to provide health conscious consumers with fresh, all natural, artisan breads made from sustainably sourced ingredients baked under Orthodox Union kosher standards that have an old world taste, and sold at an af... |
||||||
| Ransomware | southamericantours.com id5653 View details | Transportation / Travel / Logistics | — | — | ||
|
outh American Tours - SAT is South America's leading DMC, operating since 1973.Our product is tailor-made tours and travel arrangements for groups or solo travellers, be it round trips, packages, incentives or cruises. In addition to tailor-made pr... |
||||||
| Ransomware | drilmaco.com id5652 View details | Communication / Marketing | — | — | ||
|
Drilmaco specializes in deep hole drilling & honing, CNC lathe machining and milling operations. Specifically, we provide material sizing by the following processes: Turning Drilling Boring Milling Threading (TPCQ(EX), API, etc..) |
||||||
| Ransomware | techhard.ae id5651 View details | United Arab Emirates | IT | — | — | |
|
Tech Hard is an ISO – 9001: 2015 certified company that is based in Jebel Ali Free Zone, Dubai, UAE, with over two decades of experience. We are well versed in the supply of wide range of high-standard products and equipment with international approv... |
||||||
| Ransomware | micos.com id5650 View details | Manufacturing / Engineering | — | — | ||
|
Micos Engineering GmbH is an independent advanced engineering company that focuses on optical instrumentation for the European space market. As industrial partner it delivers (pre-) design, engineering, AIT (assembly, integration and testing) and ser... |
||||||
| Ransomware | sagardoy.com id5635 View details | Spain | Finance / Legal / Insurance | — | — | |
|
Sagardoy Abogados is one of the leading law firms in Spain specialised in employment law, employee benefits, pensions and social security. Since its foundation in 1980, Sagardoy Abogados has been continuously engaged in legal practice, offering our c... |
||||||
| Ransomware | pmsoffice.de id5632 View details | Germany | Hospitality / Food & Beverage / Tourism | — | — | |
|
The hotel software hotline is the award-winning hotel program for small and large hotels, with individual extensions and TSE certification.Data related hotline software and hotels they cooperate. |
||||||
| Ransomware | audio-technica.com id5626 View details | Japan | IT | — | — | |
|
Audio-Technica was founded in Japan on 17th April 1962 by Hideo Matsushita. After operating from a small flat above a ramen shop in Shinjuku, Audio-Technica opened a larger headquarters in Machida, Tokyo, where the company still operates today. |
||||||
| Ransomware | ascentengrs.com id5561 View details | — | — | — | ||
|
No additional victim description available. |
||||||
| Ransomware | ascentengrs.com id32048 View details | — | — | — | ||
|
No additional victim description available. |
||||||
| Ransomware | tjel.net id5554 View details | Manufacturing / Engineering | — | — | ||
|
AboutUs: Thai Jurong Engineering Limited (TJEL) was incorporated in December 1988. The company's core business is to provide engineering and construction services in the power generation sector. It also undertakes plant erection for industrial plant... |
||||||
| Ransomware | egas.no id5552 View details | Norway | Energy | — | — | |
|
No additional victim description available. |
||||||
| Ransomware | hico-ics.com id5551 View details | Communication / Marketing | — | — | ||
|
HiCo-ICS has been a leading global provider of enterprise IT-solutions for industry, authorities and communities since 1997. HiCo-ICS provides process and system integration, information networking of technical logistic documentation and product info... |
||||||
| Ransomware | laxmi.com id5550 View details | Other | — | — | ||
|
No additional victim description available. |
||||||
| Ransomware | hafele.com id5548 View details | Other | — | — | ||
|
Furniture fittings, architectural hardware, electronic locking systems - Häfele. The hafele.com website is currently being reactivated. On the night of February 2, 2023, there was a ransomware attack on the IT systems of the Häfele Worldwide Group fr... |
||||||
| Ransomware | indigo.ca id5547 View details | Canada | Retail / E-commerce | — | — | |
|
Indigo Books & Music Inc., known as "Indigo" and stylized "!ndigo", is Canada's only major English-language bookstore chain. It is Canada's largest book, gift, and specialty toy retailer, operating stores in all ten provinces and one territory, and t... |
||||||
| Ransomware | globalcommunities.org id5546 View details | NGOs / Associations | — | — | ||
|
Global Communities is a global development organization that has grown to reach over 35 countries per year. The non-profit organization was founded in 1952 as the Cooperative Housing Foundation and provided affordable housing for low-income families... |
||||||
| Ransomware | cobcreditunion.com id5545 View details | Finance / Legal / Insurance | — | — | ||
|
At COB we hold the opinions of every member in the highest regard. Our decisions are truly influenced by the wishes and needs of our members. 300 Million + Borrowed 60 Thousand + Members Explore What COB Has To Offer Let us help you make the best fin... |
||||||
| Ransomware | wmich.edu id5544 View details | United States | Education | — | — | |
|
Western Michigan University is a public research university in Kalamazoo, Michigan. It was initially established as Western State Normal School in 1903 by Governor Aaron T. Bliss for the training of teachers. |
||||||
| Ransomware | georgeleslie.co.uk id5543 View details | United Kingdom | Construction / Real Estate | — | — | |
|
George Leslie is a Civil Engineering Contractor that has operated in Scotland for nearly 60 years. Based in Barrhead, East Renfrewshire, we operate across Scotland and beyond working on Marine projects, Water Management, Infrastructure and Energy. |
||||||
| Ransomware | df.senac.br id5542 View details | Brazil | Communication / Marketing | — | — | |
|
Senac Distrito Federal - DF Conheça Nossos cursos! Inovação na Prática! revolucione o seu futuro! cursos livres Aprenda com cursos rápidos, práticos e conectados com as inovações do mercado. Acessar cursos Técnicos Cursos práticos e de média duração... |
||||||
| Ransomware | haeco.com id5541 View details | Manufacturing / Engineering | — | — | ||
|
Hong Kong Aircraft Engineering Company Limited is one of the world's leading independent aircraft engineering and maintenance groups with its head office located at Hong Kong International Airport. Established in 1950, the HAECO Group comprises 16 op... |
||||||
| Ransomware | nokair.com id5540 View details | Thailand | Transportation / Travel / Logistics | — | — | |
|
Nok Air is a low-cost airline in Thailand operating mostly domestic services out of Bangkok's Don Mueang International Airport. Thai Airways International owns the fourth-largest stake in the airline. |
||||||
| Ransomware | princepalace.co.th id5539 View details | Japan | Communication / Marketing | — | — | |
|
With six restaurants and bars, Prince Palace Hotel is passionate about serving guests delightful eating and drinking experiences, including at celebrated Cantonese, Japanese, Thai and international restaurants and a scenic pool bar. The two curvaceou... |
||||||
| Ransomware | lsa-international.com id5538 View details | Retail / E-commerce | — | — | ||
|
LSA International is one of Europe's leading brands of contemporary handmade glass & high quality porcelain. Shop for Wine glasses, Vases and glassware. |
||||||
| Ransomware | ilfsindia.com id5537 View details | India | Finance / Legal / Insurance | — | — | |
|
IL&FS has been registered as a Systemically Important Non-Deposit Accepting Core Investment Company. On October 01, 2018, based on a petition by Union of India, the erstwhile Board of Directors was suspended by the NCLT with immediate effect and New... |
||||||
| Ransomware | rosenbauer.com id5534 View details | Manufacturing / Engineering | — | — | ||
|
rosenbaueramerica.comRosenbauer is the world's largest producer of custom fire trucks worldwide with 14 factory locations and more than 150 years of experience.rosenbauer\veeam_admin:R%[email protected] R0s3nb@u3r232GB |
||||||
| Ransomware | hyosung.jp id5533 View details | Japan | Other | — | — | |
|
制作の流れについて格安ホームページ制作・システム開発 「孝」 |
||||||
| Ransomware | moci.gov.kw id5531 View details | Kuwait | Services | — | — | |
|
The Ministry of Commerce and Industry is responsible for supporting and supervising commercial and economic activities and providing goods, materials and services. |
||||||
| Ransomware | wsisd.com id5530 View details | Education | — | — | ||
|
White Settlement Independent School District is a public school district based in White Settlement, Texas. The district serves students in White Settlement and a portion of Fort Worth in west central Tarrant County. In 2009, the school district was r... |
||||||
| Ransomware | bocca-sacs.com id5529 View details | Agriculture / Food | — | — | ||
|
Discover the food packaging specialist. Bocca-Sacs offers you paper bags, trays, labeling material and all the necessary food packaging. |
||||||
| Ransomware | wcso.us id5528 View details | United States | Communication / Marketing | — | — | |
|
Washington County Sheriff’s Office official mobile app.We are committed to not only protecting, but also serving the citizens of Washington County with professionalism, integrity, and transparency. A part of that commitment is to provide you with the... |
||||||
| Ransomware | pcproductsinter.com id5527 View details | Communication / Marketing | — | — | ||
|
P.C. Products International Co., Ltd. is a world leading manufacturer of wheel balancing weight for automotive and aftermarket. We have over 30 years of experience in supplying to major automobile global clients like Ford, Toyota, Honda, Isuzu, Mitsu... |
||||||
| Ransomware | carveraero.com id5526 View details | Communication / Marketing | — | — | ||
|
Owned by CL Enterprises, Carver Aero(www.carveraero.com)has fixed-base operations in Muscatine and Davenport, Iowa. Carver Aero provides corporate and general aviation services in Iowa, including charter flights, corporate pilot services, airplane ma... |
||||||
| Ransomware | cotteeparker.com.au id5525 View details | Australia | Communication / Marketing | — | — | |
|
Founded in 1989, Cottee Parker combine intellect and creativity with a skilful, sensitive approach to design. We design considering culture, environment and the human condition to produce responsive and sustainable solutions. We use our experience, s... |
||||||
| Ransomware | ispace.com id5521 View details | Telecommunications | — | — | ||
|
iSpace is a leading technology and business process services company serving the healthcare, automotive, entertainment and financial services industries. Founded in 2000, our more than 600 professionals worldwide serve more than 25 Fortune 500 compan... |
||||||
| Ransomware | delawarelife.com id5518 View details | United States | Finance / Legal / Insurance | — | — | |
|
Delaware Life Insurance Company is a leading provider of annuity and life insurance products in the United States. The company was established in connection with the purchase by Delaware Life Holdings, LLC of the domestic U.S. annuity business and ce... |
||||||
| Ransomware | nougat-carlier.be id5509 View details | Belgium | Retail / E-commerce | — | — | |
|
For more than half a century, Carlier, a family business, has been making nougat by using the highest quality ingredients, in a wide variety of flavours. It all began in 1949: following the example of his father, a retail confectioner, Rodolphe Carli... |
||||||
| Ransomware | siqueiracastro.com.br id5508 View details | Brazil | Finance / Legal / Insurance | — | — | |
|
stolen 470gb data - finance, acc, reports, contractsActing on all fronts of the business, the so-called full service , is what is expected of a contemporary law firm. We, at SiqueiraCastro, go further. We are pioneers in full solution . With high... |
||||||
| Ransomware | skylinetrisource.com id5507 View details | Communication / Marketing | — | — | ||
|
Find the right fit for your brand with Skyline Trisource Exhibits and Environments in Cleveland. We create custom exhibits, without the custom price tag. Our high-impact graphics, modular structures and comprehensive services make great exhibit desig... |
||||||
| Ransomware | fosterfarms.com id5506 View details | Agriculture / Food | — | — | ||
|
Change the negotiator.He's obstructing the deal and denying the facts and the obvious obvious. And doesn't want to use valid insurance!Here are scans of insurance documents from the network of companies:http://lockbitfile2tcudkcqqt2ve6btssyvqwl... |
||||||
| Ransomware | kboattorneys.com id5505 View details | Finance / Legal / Insurance | — | — | ||
|
Organizations, groups of attorneys, and others across the country have recognized KBA’s attorneys in many different ways. Our attorneys are published and are invited to speak at conferences where thousands of attorneys from across America come to lea... |
||||||
| Ransomware | beacontech.net id5504 View details | IT | — | — | ||
|
Since 1999 Beacon Technologies has been a leading partner in the transformation of the Nashville landscape through an integrated process of delivering Telecom, Audio Visual and Life and Safety expertise to the design and development of leading edge c... |
||||||
| Ransomware | vuu.edu id5503 View details | United States | Education | — | — | |
|
Virginia Union UniversityVirginia Union University is a private historically black Baptist university in Richmond, Virginia. It is affiliated with the American Baptist Churches USA. |
||||||
| Ransomware | treves-group.com id5502 View details | Telecommunications | — | — | ||
|
Trèves est un groupe industriel spécialisé dans la fourniture d'équipements pour l'industrie automobile.250 GB DATAexample creds ESXIhttps://10.230.1.11/ui/ root:oel28&CPhttps://10.230.1.21/ui/ root:oel28&CPhttps://10.230.1.15/ui/ root:oel2... |
||||||
| Ransomware | lyonhealy.com id5501 View details | Other | — | — | ||
|
From the hallowed halls of the New York Philharmonic to the Bolshoi Ballet, Lyon & Healy Harps is acclaimed throughout the world for its remarkable depth and clarity of sound, breathtaking designs, and rich heritage of quality craftsmanship. With 130... |
||||||
| Ransomware | lasegunda.com.ar id5500 View details | Argentina | Finance / Legal / Insurance | — | — | |
|
La Segunda Seguros CLSG is a company that operates in the Insurance industry. It employs 2,001-5,000 people and has $500M-$1B of revenue. The company is headquartered in Rosario, Santa Fe Province, ArgentinaDuring our attack, all the servers of t... |
||||||
| Ransomware | carlocksystems.com id5492 View details | Manufacturing / Engineering | — | — | ||
|
Car Lock Systems is dé leverancier van autosleutels en autosloten voor automotive bedrijven. |
||||||
| Ransomware | jetboxcargo.com id5490 View details | Costa Rica | Transportation / Travel / Logistics | — | — | |
|
El Corporativo JetBox como especialista en el servicio de logística internacional, posee una amplia trayectoria en transporte aéreo y marítimo,con origen en Estados Unidos para Costa Rica. Cuenta con su propia Agencia Aduanal y ofrece los servicios... |
||||||
| Ransomware | servicesfinanciersjdf.com id5489 View details | QC | Services | — | — | |
|
JDF Services financiers est un cabinet d'assurances collectives et de personnes spécialisé dans le domaine depuis le début des années 90. |
||||||
| Ransomware | servicesfinanciersjdf.com id5489 View details | Canada | Services | — | — | |
|
JDF Services financiers est un cabinet d'assurances collectives et de personnes spécialisé dans le domaine depuis le début des années 90. |
||||||
| Ransomware | laremo.de id5488 View details | Germany | IT | — | — | |
|
Laremo Ihr Spezialist für Landtechnik, Nutzfahrzeuge, Baumaschinen, Fahrzeug- und Umwelttechnik, Stahlbau, Reifencenter, Traktoren, Mähdrescher, CLAAS, IVECO in Thüringen Greiz, Gera, Jena, Erfurt. |
||||||
| Ransomware | elliotthomes.com id5487 View details | Construction / Real Estate | — | — | ||
|
Find your new construction home by Elliott Homes, home builder in Sacramento CA, Phoenix AZ and Yuma AZ. Explore our new home communities today! |
||||||
| Ransomware | anthonymartin.be id5486 View details | Belgium | Other | — | — | |
|
Anthony Martin encourage une consommation responsable de ses bières. En entrant dans ce site vous reconnaissez avoir l'âge légal pour boire de l'alcoo |
||||||
| Ransomware | BakerMechanicalInc.com id5485 View details | Communication / Marketing | — | — | ||
|
Baker Mechanical Inc. is a family-oriented company that prides itself on ensuring unsurpassed customer satisfaction. |
||||||
| Ransomware | championfp.com id5484 View details | Communication / Marketing | — | — | ||
|
Founded in Savannah in 1983, Champion Fire Protection has been a market leader in design, fabrication, and installation of fire sprinkler systems. |
||||||
| Ransomware | sandycove.org id5483 View details | Other | — | — | ||
|
Sandy Cove's mission is to help you connect with God and each other in order to be transformed into the image of Christ, through His Word |
||||||
| Ransomware | primorossi.com.br id5482 View details | Brazil | Communication / Marketing | — | — | |
|
Invista em seu sonho de forma planejada. Adquira seu consórcio de forma prática e segura. Confie em quem tem mais de 50 anos de tradição. Saiba mais! |
||||||
| Ransomware | isosteo.fr id5481 View details | France | Other | — | — | |
|
Institut Supérieur d’Ostéopathie Lyon, ISOstéo Lyon a participé activement à la création du 1er enseignement de l’ostéopathie en formation initiale post-bac.Le Diplôme d’Ostéopathie (D.O) délivré par ISOstéo Lyon est reconnu Niveau 7 RNCP et permet... |
||||||
| Ransomware | diavaz.com id5480 View details | Energy | — | — | ||
|
The DIAVAZ Group is an organization of companies and strategic alliances created mainly to provide integrated solutions for the oil industry using the most advanced technologies available on the market. |
||||||
| Ransomware | aguasdoporto.pt id5479 View details | Portugal | Energy | — | — | |
|
Aguas do Porto is a municipal water utility company that manages full water cycle including water supply, wastewater drainage. |
||||||
| Ransomware | inowai.com id5478 View details | Luxembourg | Construction / Real Estate | — | — | |
|
Using the human factor as the driving force of excellence and quality as the lever of productivity, INOWAI has established itself as a leader in residential and professional real estate consulting in Luxembourg for more than 20 years.Our goal: to off... |
||||||
| Ransomware | piercetransit.org id5477 View details | Retail / E-commerce | — | — | ||
|
Pierce Transit is proud to serve our community as Pierce County’s local public transportation service. In 2019 we provided more than 9 million rides to people headed to work, medical appointments, entertainment, grocery shopping, visits with friends... |
||||||
| Ransomware | hotdesk.me id5476 View details | Hospitality / Food & Beverage / Tourism | — | — | ||
|
Hotdesk.me and their customers such as Barrington James (barringtonjames.com), Sarnac Partners (sarnacpartnertners.com), Hardman & Watson (hardmanandwatson.co.uk), Penspen (penspen.com), Perkins & Will (perkinswill.com), etc.We can't confirm if any... |
||||||
| Ransomware | innophaseinc.com id5475 View details | Construction / Real Estate | — | — | ||
|
InnoPhase is a fabless semiconductor company that develops innovative and efficient RF architectures using CMOS technology. Building on our previous experience with WLAN IoT products, we have now turned our attention to building energy efficient radi... |
||||||
| Ransomware | alliedtools.com id5474 View details | Communication / Marketing | — | — | ||
|
Allied International was founded in 1962 as an import distributor of hardware products. Over the years, with our unwavering commitment to innovation, quality, value and service, we have earned the reputation as the recognized market leader in our cor... |
||||||