Ransomware Group intelligence
Lockbit3
InactiveTrack Lockbit3 with 2021 published victims and 40 known leak locations in a single intelligence view.
Overview
Lockbit3 is tracked by Breach House as a ransomware group with 2021 published victims.
United States is currently the most targeted country in this dataset.
40 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (40)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion |
| Leak location 2 | Onion service | Unknown | lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion |
| Leak location 3 | Onion service | Unknown | lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion |
| Leak location 4 | Onion service | Unknown | lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion |
| Leak location 5 | Onion service | Unknown | lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion |
| Leak location 6 | Onion service | Unknown | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 7 | Onion service | Unknown | lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion |
| Leak location 8 | Onion service | Unknown | lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion |
| Leak location 9 | Onion service | Unknown | lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion |
| Leak location 10 | Onion service | Unknown | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 11 | Onion service | Unknown | lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion |
| Leak location 12 | Onion service | Unknown | lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion |
| Leak location 13 | Onion service | Unknown | lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion |
| Leak location 14 | Onion service | Unknown | lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion |
| Leak location 15 | Onion service | Unknown | lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion |
| Leak location 16 | Onion service | Unknown | lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion |
| Leak location 17 | Onion service | Unknown | lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion |
| Leak location 18 | Onion service | Unknown | lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion |
| Leak location 19 | Onion service | Unknown | lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion |
| Leak location 20 | Onion service | Unknown | lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion |
| Leak location 21 | Onion service | Unknown | lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion |
| Leak location 22 | Onion service | Unknown | lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion |
| Leak location 23 | Onion service | Unknown | lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion |
| Leak location 24 | Onion service | Unknown | lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion |
| Leak location 25 | Onion service | Unknown | lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion |
| Leak location 26 | Onion service | Unknown | lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion |
| Leak location 27 | Onion service | Unknown | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 28 | Onion service | Unknown | ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion |
| Leak location 29 | Onion service | Unknown | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 30 | Onion service | Unknown | lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion |
| Leak location 31 | Onion service | Unknown | lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion |
| Leak location 32 | Onion service | Unknown | lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion |
| Leak location 33 | Onion service | Unknown | lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion |
| Leak location 34 | Onion service | Unknown | lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion |
| Leak location 35 | Onion service | Unknown | lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion |
| Leak location 36 | Onion service | Unknown | lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion |
| Leak location 37 | Onion service | Unknown | lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion |
| Leak location 38 | Onion service | Unknown | lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion |
| Leak location 39 | Onion service | Unknown | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 40 | Onion service | Unknown | lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2021)
Search, filter and paginate the victim timeline for Lockbit3. Showing 1801–1900 of 2021.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | okibrasil.com id4206 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | mts.mektec.com id4205 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ducanh.com id4204 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | franckbeun.fr id4202 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | hering-heinz.de id4199 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | First bounty payout $50,000 id4195 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | scottobrothers.com id4193 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kaffeeberlin.com id4192 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | equatortrustees.com id4191 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ces-conditionneur.fr id4190 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | software-line.it id4189 View details | Italy | IT | — | |
|
No additional victim description available. |
|||||
| Ransomware | asecna.org id4188 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dss-cz.com id4186 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | midlandplastics.com id4184 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | nakamuracorp.co.jp id4183 View details | Japan | Services | — | |
|
No additional victim description available. |
|||||
| Ransomware | medical69.com id4180 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | d-securite.com id4179 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | aliat.group id4178 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | southamptoncounty.org id4177 View details | Public Sector | — | ||
|
No additional victim description available. |
|||||
| Ransomware | makler.com.ve id4176 View details | Venezuela, Bolivarian Republic of | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | independence.com.co id4175 View details | Colombia | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | cnachile.cl id4174 View details | Chile | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | markherder.com id4173 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | inspecshawaii.com id4172 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ville-faulquemont.fr id4167 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | thezincgroup.com id4166 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | taxprepandmore.com id4165 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | tapcocu.org id4164 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sva-avignon.concession-landrover.fr id4163 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sarassure.fr id4162 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | quintal.com.co id4161 View details | Colombia | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | pays-colombey-sudtoulois.fr id4160 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | mj-donnais.fr id4159 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | maleosante.fr id4158 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | maisonloisy.fr id4157 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | mackenzie-law.co.uk id4156 View details | United Kingdom | Finance / Legal / Insurance | — | |
|
No additional victim description available. |
|||||
| Ransomware | lagence33.com id4155 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kwp.at id4154 View details | Austria | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | kcgreenholdings.com id4153 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | jt-engineering.com id4152 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | euromip.fr id4151 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | euro-modules.fr id4150 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | daune.org id4149 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cultivar.net id4148 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cmb-artimmo.com id4147 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cityofbartlett.org id4146 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | camdomain.com id4145 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | artdis.fr id4144 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | aipcenergy.com id4143 View details | Energy | — | ||
|
No additional victim description available. |
|||||
| Ransomware | idealtridon.com id4142 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bakkerheftrucks.com id4127 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | bakkerheftrucks.local id4126 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | omegaservices.com.au id4124 View details | Australia | Energy | — | |
|
No additional victim description available. |
|||||
| Ransomware | frigobandeira.com id4122 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ch-sf.fr id4121 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | ch-sf.fr (old) id4120 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hamiota.com id4119 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | canadiansolar.com id4118 View details | Energy | — | ||
|
No additional victim description available. |
|||||
| Ransomware | aralaw.cr id4117 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | marugokiso.co.jp id4114 View details | Japan | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | lacalera.pe id4113 View details | Peru | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | diakonissen-riehen.ch id4112 View details | Switzerland | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | dcashpro.com id4111 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | connectvitypoint.com id4110 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | kisan.com.tr id4109 View details | Türkiye | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | kortrijkserijschool.be id4108 View details | Belgium | Education | — | |
|
No additional victim description available. |
|||||
| Ransomware | marcopolohotels.com id4103 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hunters.com id4102 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | misumi.com.tw id4101 View details | Taiwan, Province of China | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | metaage.com.tw id4100 View details | Taiwan, Province of China | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | lafondasantafe.com id4097 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | gavresorts.com.br id4096 View details | Brazil | Hospitality / Food & Beverage / Tourism | — | |
|
No additional victim description available. |
|||||
| Ransomware | sbr-zwiesel.de id4095 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | pdh.com.tw id4094 View details | Taiwan, Province of China | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | monnensenpartners.be id4093 View details | Belgium | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | sportscity.com.tw id4090 View details | Taiwan, Province of China | Public Sector | — | |
|
No additional victim description available. |
|||||
| Ransomware | finnco.eu id4089 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www3.comune.gorizia.it id4087 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | kamut.com id4086 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | divultec.pt id4085 View details | Portugal | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | eneva.com.br id4084 View details | Brazil | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | hmets.com id4079 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | floresfunza.com id4078 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | peakinternational.com id4073 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | solidatech.com id4064 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | precision.com id4063 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hspatent.com id4062 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | MEIJI.COM.SG id4057 View details | Singapore | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | currierryan.com id4042 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ygboulons.com id4040 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | uplexis.com.br id4039 View details | Brazil | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | embalajescapsa.com id4038 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | accionplus.com id4037 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | goodwillnm.org id4034 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | thininfra.nl id4033 View details | Netherlands | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | stjohnvianney.org id4032 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | stevesilvaplumbing.com id4031 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | statravel.de id4030 View details | Germany | Transportation / Travel | — | |
|
No additional victim description available. |
|||||
| Ransomware | sportlavit.nl id4029 View details | Netherlands | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | perteet.com id4028 View details | Other | — | ||
|
No additional victim description available. |
|||||