Ransomware Group intelligence

Lockbit3

Inactive

Track Lockbit3 with 2021 published victims and 40 known leak locations in a single intelligence view.

Victims 2021 Known published victims in this dataset
First discovered 2022-06-29 Earliest victim discovery date
Last discovered 2025-12-05 Latest victim discovery date
Inactive since 235 days Days since the latest known victim
Top country United States 311 victims
Known locations 40 Leak or negotiation infrastructure tracked

Overview

Lockbit3 is tracked by Breach House as a ransomware group with 2021 published victims.

United States is currently the most targeted country in this dataset.

40 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (40)

    Label Type Availability Links
    Leak location 1 Onion service Unknown lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion
    Leak location 2 Onion service Unknown lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
    Leak location 3 Onion service Unknown lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion
    Leak location 4 Onion service Unknown lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion
    Leak location 5 Onion service Unknown lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion
    Leak location 6 Onion service Unknown lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion
    Leak location 7 Onion service Unknown lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion
    Leak location 8 Onion service Unknown lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion
    Leak location 9 Onion service Unknown lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion
    Leak location 10 Onion service Unknown lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion
    Leak location 11 Onion service Unknown lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion
    Leak location 12 Onion service Unknown lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion
    Leak location 13 Onion service Unknown lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion
    Leak location 14 Onion service Unknown lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion
    Leak location 15 Onion service Unknown lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion
    Leak location 16 Onion service Unknown lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion
    Leak location 17 Onion service Unknown lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion
    Leak location 18 Onion service Unknown lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion
    Leak location 19 Onion service Unknown lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion
    Leak location 20 Onion service Unknown lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion
    Leak location 21 Onion service Unknown lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion
    Leak location 22 Onion service Unknown lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion
    Leak location 23 Onion service Unknown lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion
    Leak location 24 Onion service Unknown lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion
    Leak location 25 Onion service Unknown lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion
    Leak location 26 Onion service Unknown lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion
    Leak location 27 Onion service Unknown lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 28 Onion service Unknown ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion
    Leak location 29 Onion service Unknown lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 30 Onion service Unknown lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion
    Leak location 31 Onion service Unknown lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion
    Leak location 32 Onion service Unknown lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion
    Leak location 33 Onion service Unknown lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion
    Leak location 34 Onion service Unknown lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion
    Leak location 35 Onion service Unknown lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion
    Leak location 36 Onion service Unknown lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion
    Leak location 37 Onion service Unknown lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion
    Leak location 38 Onion service Unknown lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion
    Leak location 39 Onion service Unknown lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 40 Onion service Unknown lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2021)

    Search, filter and paginate the victim timeline for Lockbit3. Showing 101–200 of 2021.

    Type Target Discovered Country Business Category Intel Link
    Ransomware johnllowery.com id13766 View details United States Communication / Marketing
    Ransomware qespavements.com id13765 View details United States Communication / Marketing
    Ransomware emanic.net id13764 View details United States Communication / Marketing
    Ransomware kronospublic.com id13761 View details Greece Public Sector
    Ransomware kierlcpa.com id13694 View details United States Finance / Legal / Insurance
    Ransomware fcl.crs id13680 View details Canada Services
    Ransomware sandytownshippolice.org id13629 View details United States Communication / Marketing
    Ransomware atcdi.com.cn id13628 View details China Communication / Marketing
    Ransomware frilot.com id13627 View details United States Finance / Legal / Insurance
    Ransomware pbw-india.com id13626 View details India Communication / Marketing
    Ransomware agapefrance.org id13625 View details France Other
    Ransomware ciberviaxesespecial.net id13624 View details Spain Finance / Legal / Insurance
    Ransomware eastern-sales.com id13623 View details United States Retail / E-commerce
    Ransomware glnf.fr id13557 View details France Other
    Ransomware tccfleet.com id13527 View details Hong Kong Other
    Ransomware petroassist.co.uk id13526 View details United Kingdom Energy
    Ransomware e21c.co.uk id13525 View details United Kingdom Education
    Ransomware concorddirect.com id13448 View details United States Manufacturing / Engineering
    Ransomware townandforest.co.uk id13447 View details United Kingdom Communication / Marketing
    Ransomware norton.k12.ma.us id13446 View details United States Education
    Ransomware energateinc.com id13445 View details Services
    Ransomware plantmachineworks.com id13444 View details Retail / E-commerce
    Ransomware piedmonthoist.com id13443 View details United States Retail / E-commerce
    Ransomware gptchb.org id13442 View details Healthcare / Pharma
    Ransomware assih.com id13441 View details Egypt Healthcare / Pharma
    Ransomware wattlerange.sa.gov.au id13440 View details Australia Public Sector
    Ransomware claycountyin.gov id13439 View details United States Public Sector
    Ransomware iteam.gr id13438 View details Greece IT
    Ransomware albonanova.at id13437 View details Austria Hospitality / Food & Beverage / Tourism
    Ransomware lothar-rapp.de id13436 View details Germany Other
    Ransomware goldstarmetal.com id13435 View details Thailand Manufacturing / Engineering
    Ransomware glsco.com id13434 View details United States Healthcare / Pharma
    Ransomware paysdelaloire.fr id13433 View details France Agriculture / Food
    Ransomware troyareasd.org id13432 View details Armenia Education
    Ransomware barkingwell.gr id13431 View details Greece Hospitality / Food & Beverage / Tourism
    Ransomware fbrlaw.com id13430 View details United States Finance / Legal / Insurance
    Ransomware customssupport.be id13429 View details Belgium Services
    Ransomware joliet86.org id13428 View details United States Education
    Ransomware noab.nl id13287 View details Netherlands Other
    Ransomware ws-stahl.eu id13274 View details Germany Manufacturing / Engineering
    Ransomware homelandvinyl.com id13273 View details United States Communication / Marketing
    Ransomware eicher.in id13272 View details India Manufacturing / Engineering
    Ransomware merrymanhouse.org id13239 View details United States Communication / Marketing
    Ransomware fairfieldmemorial.org id13238 View details United States Healthcare / Pharma
    Ransomware latinusa.co.id id13217 View details Indonesia Finance / Legal / Insurance
    Ransomware kbc-zagreb.hr id13216 View details Croatia Healthcare / Pharma
    Ransomware competenz.co.nz id13163 View details New Zealand Finance / Legal / Insurance
    Ransomware federalreserve.gov id13125 View details United States Public Sector
    Ransomware qftemb.com id13118 View details China IT
    Ransomware marvell.com id13111 View details Singapore Telecommunications
    Ransomware at-global.com id13110 View details Singapore Telecommunications
    Ransomware manncorp.com id12968 View details United States Services
    Ransomware ccmaui.org id12925 View details United States Healthcare / Pharma
    Ransomware craigsteven.com id12884 View details United States Construction / Real Estate
    Ransomware naprodgroup.com id12814 View details India Communication / Marketing
    Ransomware cfymca.org id12805 View details United States Communication / Marketing
    Ransomware smithandcaugheys.co.nz id12798 View details New Zealand Communication / Marketing
    Ransomware powertestdyno.com id12796 View details United States Energy
    Ransomware aytosanlorenzo.es id12786 View details Spain Public Sector
    Ransomware strikeusa.com id12784 View details United States Manufacturing / Engineering
    Ransomware heras.co.uk id12770 View details United Kingdom Communication / Marketing
    Ransomware alliedtelesis.com id12733 View details United States Telecommunications
    Ransomware multigroup.info id12714 View details France Manufacturing / Engineering
    Ransomware pressurejet.com id12713 View details India Communication / Marketing
    Ransomware mgops.sedziszow-mlp.pl id12712 View details Poland Other
    Ransomware kharafiglobal.com id12711 View details Kuwait Hospitality / Food & Beverage / Tourism
    Ransomware sunpetro.com id12710 View details India Communication / Marketing
    Ransomware cafesnovell.com id12709 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware highwaystrust.com id12708 View details India Construction / Real Estate
    Ransomware sysroad.com id12707 View details United States IT
    Ransomware longviewoms.com id12706 View details United States Healthcare / Pharma
    Ransomware bnsgroup.co.uk id12700 View details United Kingdom Healthcare / Pharma
    Ransomware workscapes.com id12697 View details United States Services
    Ransomware kns.com id12695 View details Singapore Manufacturing / Engineering
    Ransomware valleylandtitleco.com id12690 View details United States Communication / Marketing
    Ransomware londondrugs.com id12656 View details Canada Retail / E-commerce
    Ransomware schmittyandsons.com id12655 View details United States Other
    Ransomware ramfoam.com id12653 View details United Kingdom Communication / Marketing
    Ransomware qualityplumbingassociates.com id12627 View details United States Energy
    Ransomware carcajou.fr id12618 View details France Manufacturing / Engineering
    Ransomware equinoxinc.org id12617 View details United States Finance / Legal / Insurance
    Ransomware unisi.it id12616 View details Italy Education
    Ransomware pricemodern.com id12586 View details United States Communication / Marketing
    Ransomware valleyjoist.com id12584 View details United States Manufacturing / Engineering
    Ransomware kauffmanschool.org id12578 View details United States Education
    Ransomware ema-eda.com id12577 View details United States Other
    Ransomware twpunionschools.org id12576 View details United States Education
    Ransomware epsd.org id12562 View details United Kingdom Education
    Ransomware district70.org id12561 View details United States Education
    Ransomware keuka.edu id12560 View details United States Education
    Ransomware allcare-med.com id12559 View details United States Communication / Marketing
    Ransomware daubertchemical.com id12556 View details United States Manufacturing / Engineering
    Ransomware morrisgroupint.com id12544 View details United States Manufacturing / Engineering
    Ransomware acla.de id12537 View details Germany Communication / Marketing
    Ransomware oseranhahn.com id12524 View details United States Finance / Legal / Insurance
    Ransomware jmjcorporation.com id12523 View details United States Communication / Marketing
    Ransomware countyins.com id12522 View details United Kingdom Public Sector
    Ransomware utc-silverstone.co.uk id12521 View details United Kingdom Education
    Ransomware hesperiausd.org id12520 View details United States Education
    Ransomware 21stcenturyvitamins.com id12496 View details United States Other