Ransomware Group intelligence

Lockbit3

Inactive

Track Lockbit3 with 2021 published victims and 40 known leak locations in a single intelligence view.

Victims 2021 Known published victims in this dataset
First discovered 2022-06-29 Earliest victim discovery date
Last discovered 2025-12-05 Latest victim discovery date
Inactive since 235 days Days since the latest known victim
Top country United States 311 victims
Known locations 40 Leak or negotiation infrastructure tracked

Overview

Lockbit3 is tracked by Breach House as a ransomware group with 2021 published victims.

United States is currently the most targeted country in this dataset.

40 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (40)

    Label Type Availability Links
    Leak location 1 Onion service Unknown lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion
    Leak location 2 Onion service Unknown lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
    Leak location 3 Onion service Unknown lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion
    Leak location 4 Onion service Unknown lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion
    Leak location 5 Onion service Unknown lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion
    Leak location 6 Onion service Unknown lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion
    Leak location 7 Onion service Unknown lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion
    Leak location 8 Onion service Unknown lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion
    Leak location 9 Onion service Unknown lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion
    Leak location 10 Onion service Unknown lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion
    Leak location 11 Onion service Unknown lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion
    Leak location 12 Onion service Unknown lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion
    Leak location 13 Onion service Unknown lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion
    Leak location 14 Onion service Unknown lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion
    Leak location 15 Onion service Unknown lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion
    Leak location 16 Onion service Unknown lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion
    Leak location 17 Onion service Unknown lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion
    Leak location 18 Onion service Unknown lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion
    Leak location 19 Onion service Unknown lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion
    Leak location 20 Onion service Unknown lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion
    Leak location 21 Onion service Unknown lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion
    Leak location 22 Onion service Unknown lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion
    Leak location 23 Onion service Unknown lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion
    Leak location 24 Onion service Unknown lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion
    Leak location 25 Onion service Unknown lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion
    Leak location 26 Onion service Unknown lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion
    Leak location 27 Onion service Unknown lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 28 Onion service Unknown ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion
    Leak location 29 Onion service Unknown lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 30 Onion service Unknown lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion
    Leak location 31 Onion service Unknown lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion
    Leak location 32 Onion service Unknown lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion
    Leak location 33 Onion service Unknown lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion
    Leak location 34 Onion service Unknown lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion
    Leak location 35 Onion service Unknown lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion
    Leak location 36 Onion service Unknown lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion
    Leak location 37 Onion service Unknown lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion
    Leak location 38 Onion service Unknown lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion
    Leak location 39 Onion service Unknown lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion
    Leak location 40 Onion service Unknown lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2021)

    Search, filter and paginate the victim timeline for Lockbit3. Showing 401–500 of 2021.

    Type Target Discovered Country Business Category Intel Link
    Ransomware lec-london.uk id11164 View details United Kingdom Healthcare / Pharma
    Ransomware gpaa.gov.za id11160 View details South Africa Communication / Marketing
    Ransomware redwoodcoastrc.org id11143 View details United States Construction / Real Estate
    Ransomware rmhfranchise.com id11133 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware sunwave.com.cn id11104 View details China Other
    Ransomware central.k12.or.us id11102 View details United States Education
    Ransomware jovani.com id11091 View details United States Retail / E-commerce
    Ransomware valoremreply.com id11090 View details United States IT
    Ransomware earnesthealth.com id11080 View details United States Healthcare / Pharma
    Ransomware stockdevelopment.com id11076 View details United States Construction / Real Estate
    Ransomware aerospace.com id11074 View details United States Communication / Marketing
    Ransomware starkpower.de id11073 View details Germany Energy
    Ransomware roehr-stolberg.de id11072 View details Germany Communication / Marketing
    Ransomware schuett-grundei.de id11071 View details Germany Other
    Ransomware unitednotions.com id11070 View details United States Other
    Ransomware smuldes.com id11069 View details Belgium Manufacturing / Engineering
    Ransomware esser-ps.de id11068 View details Germany IT
    Ransomware gapsolutions.com.au id11024 View details Australia Services
    Ransomware easternshipbuilding.com id11019 View details Panama Construction / Real Estate
    Ransomware vertdure.com id11011 View details Canada Finance / Legal / Insurance
    Ransomware sundbirsta.com id11010 View details Sweden Transportation / Travel / Logistics
    Ransomware npgandour.com id10998 View details Côte d'Ivoire Other
    Ransomware prattindustries.com id10988 View details United States Communication / Marketing
    Ransomware silganhodlings.com id10978 View details United States Communication / Marketing
    Ransomware silganholdings.com id10974 View details United States Manufacturing / Engineering
    Ransomware ernesthealth.com id10973 View details United States Healthcare / Pharma
    Ransomware apeagers.com.au id10967 View details New Zealand Manufacturing / Engineering
    Ransomware dunaway.com id10964 View details United States Construction / Real Estate
    Ransomware crbgroup.com id10963 View details United States Construction / Real Estate
    Ransomware nationaldentex.com id10962 View details United States Healthcare / Pharma
    Ransomware equilend.com id10961 View details United States Finance / Legal / Insurance
    Ransomware magierp.com id10960 View details United States Services
    Ransomware soco.be id10908 View details Belgium Other
    Ransomware aeromechinc.com id10901 View details United States Retail / E-commerce
    Ransomware carlfischer.com id10900 View details United States Other
    Ransomware bucher-strauss.ch id10898 View details Switzerland Other
    Ransomware etisalat.ae id10878 View details United Arab Emirates Telecommunications
    Ransomware theclosingagent.com id10877 View details United States Construction / Real Estate
    Ransomware spaldingssd.com id10876 View details Canada Communication / Marketing
    Ransomware tormetal.cl id10875 View details Chile Manufacturing / Engineering
    Ransomware champion.com.co id10854 View details Colombia Transportation / Travel / Logistics
    Ransomware coreengg.com id10853 View details United States Manufacturing / Engineering
    Ransomware sitrack.com id10852 View details Argentina Services
    Ransomware hatsinteriors.com id10851 View details United Arab Emirates Communication / Marketing
    Ransomware pradiergranulats.fr id10850 View details France Communication / Marketing
    Ransomware centralepaysanne.lu id10849 View details Luxembourg Agriculture / Food
    Ransomware studiogalbusera.com id10845 View details Italy Other
    Ransomware kabat.pl id10837 View details Poland Communication / Marketing
    Ransomware wsnelson.com id10835 View details United States Other
    Ransomware fultoncountyga.gov id10834 View details United States Public Sector
    Ransomware mmiculinary.com id10830 View details United States Communication / Marketing
    Ransomware adioscancer.com id10829 View details United States Other
    Ransomware rajawali.com id10827 View details Indonesia Construction / Real Estate
    Ransomware motilaloswal.com id10826 View details India Services
    Ransomware universalservicesms.com id10817 View details United States Services
    Ransomware doprastav.sk id10815 View details Slovakia Communication / Marketing
    Ransomware auruminstitute.org id10808 View details South Africa Education
    Ransomware tecasrl.it id10803 View details Italy Other
    Ransomware vhprimary.com id10793 View details United Arab Emirates Communication / Marketing
    Ransomware germaintoiture.fr id10792 View details France Other
    Ransomware jacksonvillebeach.org id10787 View details United States Other
    Ransomware robs.org id10786 View details United States Education
    Ransomware parkhomeassist.co.uk id10785 View details United Kingdom Finance / Legal / Insurance
    Ransomware grotonschools.org id10784 View details United States Education
    Ransomware isspol.gov id10783 View details Ecuador Other
    Ransomware lyon.co.uk id10782 View details United Kingdom Other
    Ransomware dienerprecisionpumps.com id10781 View details Switzerland Communication / Marketing
    Ransomware envie.org id10780 View details France Other
    Ransomware sealco-leb.com id10779 View details Lebanon Other
    Ransomware camarotto.it id10778 View details Italy Other
    Ransomware paltertonprimary.co.uk id10777 View details United Kingdom Communication / Marketing
    Ransomware fidcornelis.be id10776 View details Belgium Other
    Ransomware plexustelerad.com id10775 View details United States Other
    Ransomware cabc.com.ar id10774 View details Argentina Other
    Ransomware textiles.org.tw id10773 View details Taiwan, Province of China Communication / Marketing
    Ransomware silverairways.com id10772 View details Bahamas Transportation / Travel / Logistics
    Ransomware lacolline-skincare.com id10767 View details Switzerland Communication / Marketing
    Ransomware aisg-online.com id10753 View details United States Telecommunications
    Ransomware verdimed.es id10751 View details Spain Agriculture / Food
    Ransomware water.cc id10749 View details United States Other
    Ransomware magi-erp.com id10745 View details United States Services
    Ransomware alfiras.com id10740 View details United Arab Emirates Construction / Real Estate
    Ransomware grupomoraval.com id10738 View details Spain Construction / Real Estate
    Ransomware cdtmedicus.pl id10737 View details Poland Healthcare / Pharma
    Ransomware soken-ce.co.jp id10736 View details Japan Retail / E-commerce
    Ransomware maximumresearch.com id10735 View details United States Other
    Ransomware indoramaventures.com id10734 View details Thailand Manufacturing / Engineering
    Ransomware northseayachtsupport.nl id10732 View details Netherlands Services
    Ransomware seymourct.org id10731 View details United States Other
    Ransomware bsaarchitects.com id10730 View details United States Construction / Real Estate
    Ransomware moneyadvicetrust.org id10729 View details United Kingdom NGOs / Associations
    Ransomware macqueeneq.com id10727 View details United States Education
    Ransomware galbusera.it id10725 View details Italy Communication / Marketing
    Ransomware perkinsmfg.com id10722 View details United States Communication / Marketing
    Ransomware originalfootwear.com id10721 View details United States Finance / Legal / Insurance
    Ransomware axsbolivia.com id10704 View details Bolivia, Plurinational State of Communication / Marketing
    Ransomware vimarequipment.com id10703 View details Canada Manufacturing / Engineering
    Ransomware themisbourne.co.uk id10678 View details United Kingdom Education
    Ransomware hutchpaving.com id10676 View details United States Finance / Legal / Insurance
    Ransomware davis-french-associates.co.uk id10675 View details United Kingdom Services