Ransomware Group intelligence
Lockbit3
InactiveTrack Lockbit3 with 2022 published victims and 42 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Lockbit3 is tracked by Breach House as a ransomware group with 2022 published victims.
United States is currently the most targeted country in this dataset.
42 known leak locations are currently associated with this group.
Leak Status Distribution
26
- Leaked 10 38.5%
- Pending 16 61.5%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (42)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 27 | Onion service | Up checked 5h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 29 | Onion service | Up checked 5h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 39 | Onion service | Up checked 5h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 42 | Onion service | Down checked 5h ago | lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion |
| Leak location 41 | Onion service | Down checked 5h ago | lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43foocwmrzsokumqid.onion |
| Leak location 40 | Onion service | Down checked 5h ago | lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion |
| Leak location 35 | Onion service | Down checked 5h ago | lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion |
| Leak location 38 | Onion service | Down checked 5h ago | lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion |
| Leak location 37 | Onion service | Down checked 5h ago | lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion |
| Leak location 36 | Onion service | Down checked 5h ago | lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion |
| Leak location 34 | Onion service | Down checked 5h ago | lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion |
| Leak location 33 | Onion service | Down checked 5h ago | lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion |
| Leak location 32 | Onion service | Down checked 5h ago | lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion |
| Leak location 31 | Onion service | Down checked 5h ago | lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion |
| Leak location 30 | Onion service | Down checked 5h ago | lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion |
| Leak location 28 | Onion service | Down checked 5h ago | ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion |
| Leak location 26 | Onion service | Down checked 5h ago | lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion |
| Leak location 24 | Onion service | Down checked 5h ago | lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion |
| Leak location 25 | Onion service | Down checked 5h ago | lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion |
| Leak location 23 | Onion service | Down checked 5h ago | lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion |
| Leak location 21 | Onion service | Down checked 5h ago | lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion |
| Leak location 22 | Onion service | Down checked 5h ago | lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion |
| Leak location 20 | Onion service | Down checked 5h ago | lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion |
| Leak location 19 | Onion service | Down checked 5h ago | lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion |
| Leak location 17 | Onion service | Down checked 5h ago | lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion |
| Leak location 18 | Onion service | Down checked 5h ago | lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion |
| Leak location 16 | Onion service | Down checked 5h ago | lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion |
| Leak location 15 | Onion service | Down checked 5h ago | lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion |
| Leak location 14 | Onion service | Down checked 5h ago | lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion |
| Leak location 12 | Onion service | Down checked 5h ago | lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion |
| Leak location 13 | Onion service | Down checked 5h ago | lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion |
| Leak location 9 | Onion service | Down checked 5h ago | lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion |
| Leak location 11 | Onion service | Down checked 5h ago | lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion |
| Leak location 8 | Onion service | Down checked 5h ago | lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion |
| Leak location 7 | Onion service | Down checked 5h ago | lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion |
| Leak location 6 | Onion service | Down checked 5h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 10 | Onion service | Down checked 5h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 5 | Onion service | Down checked 5h ago | lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion |
| Leak location 4 | Onion service | Down checked 5h ago | lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion |
| Leak location 3 | Onion service | Down checked 5h ago | lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion |
| Leak location 2 | Onion service | Down checked 5h ago | lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion |
| Leak location 1 | Onion service | Down checked 5h ago | lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion |
Top Activity Sectors (17)
- Not identified 462
- Communication / Marketing 418
- Services 158
- Manufacturing / Engineering 144
- Finance / Legal / Insurance 141
- Healthcare / Pharma 108
- Education 92
- Construction / Real Estate 76
- IT 73
- Energy 69
- Public Sector 65
- Retail / E-commerce 57
- Transportation / Travel / Logistics 52
- Hospitality / Food & Beverage / Tourism 35
- Agriculture / Food 31
- Telecommunications 24
- NGOs / Associations 13
Typical Attacks (34)
▼How Lockbit3 typically operates, as attributed by MITRE ATT&CK v19.2. Attributed via LockBit 3.0.
-
What they do: LockBit 3.0 can use a compromised local account for lateral movement.
What that means: Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1059.001 PowerShell Execution
What they do: LockBit 3.0 can use PowerShell to apply Group Policy changes.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: LockBit 3.0 has the ability to directly call native Windows API items during execution.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
T1569.002 Service Execution Execution
What they do: LockBit 3.0 can use PsExec to execute commands and payloads.
What that means: Adversaries may abuse the Windows service control manager to execute malicious commands or payloads.
-
What they do: LockBit 3.0 can change the Registry values for Group Policy refresh time, to disable SmartScreen, and to disable Windows Defender.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
What they do: LockBit 3.0 can install system services for persistence.
What that means: Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence.
-
What they do: LockBit 3.0 can enable automatic logon through the `SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon` Registry key.
What that means: Adversaries may abuse features of Winlogon to execute DLLs and/or executables when a user logs in.
-
What they do: LockBit 3.0 can enable options for propogation through Group Policy Objects.
What that means: Adversaries may modify Group Policy Objects (GPOs) to subvert the intended discretionary access controls for a domain, usually with the intention of escalating privileges on the domain.
-
T1548.002 Bypass User Account Control Privilege Escalation
What they do: LockBit 3.0 can bypass UAC to execute code with elevated privileges through an elevated Component Object Model (COM) interface.
What that means: Adversaries may bypass UAC mechanisms to elevate process privileges on system.
-
T1027.002 Software Packing Stealth
What they do: LockBit 3.0 can use code packing to hinder analysis.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1027.013 Encrypted/Encoded File Stealth
What they do: The LockBit 3.0 payload includes an encrypted main component.
What that means: Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.
-
T1070.004 File Deletion Stealth
What they do: LockBit 3.0 can delete itself from disk.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1140 Deobfuscate/Decode Files or Information Stealth
What they do: The LockBit 3.0 payload is decrypted at runtime.
What that means: Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis.
-
T1218.003 CMSTP Stealth
What they do: LockBit 3.0 can attempt a CMSTP UAC bypass if it does not have administrative privileges.
What that means: Adversaries may abuse CMSTP to proxy execution of malicious code.
-
T1480 Execution Guardrails Stealth
What they do: LockBit 3.0 can make execution dependent on specific parameters including a unique passphrase and the system language of the targeted host not being found on a set exclusion list.
What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
-
T1480.002 Mutual Exclusion Stealth
What they do: LockBit 3.0 can create and check for a mutex containing a hash of the `MachineGUID` value at execution to prevent running more than one instance.
What that means: Adversaries may constrain execution or actions based on the presence of a mutex associated with malware.
-
What they do: LockBit 3.0 can check heap memory parameters for indications of a debugger and stop the flow of events to the attached debugger in order to hinder dynamic analysis.
What that means: Adversaries may employ various means to detect and avoid debuggers.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: LockBit 3.0 can disable security tools to evade detection including Windows Defender.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1685.005 Clear Windows Event Logs Defense Impairment
What they do: LockBit 3.0 can delete log files on targeted systems.
What that means: Adversaries may clear Windows Event Logs to hide the activity of an intrusion.
-
T1688 Safe Mode Boot Defense Impairment
What they do: LockBit 3.0 can reboot the infected host into Safe Mode.
What that means: Adversaries may abuse Windows safe mode to disable endpoint defenses.
-
T1057 Process Discovery Discovery
What they do: LockBit 3.0 can identify and terminate specific services.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1082 System Information Discovery Discovery
What they do: LockBit 3.0 can enumerate system hostname and domain.
What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
-
T1083 File and Directory Discovery Discovery
What they do: LockBit 3.0 can exclude files associated with core system functions from encryption.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1120 Peripheral Device Discovery Discovery
What they do: LockBit 3.0 has the ability to discover external storage devices.
What that means: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.
-
T1135 Network Share Discovery Discovery
What they do: LockBit 3.0 can identify network shares on compromised systems.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1614.001 System Language Discovery Discovery
What they do: LockBit 3.0 will not affect machines with language settings matching a defined exlusion list of mainly Eastern European languages.
What that means: Adversaries may attempt to gather information about the system language of a victim in order to infer the geographical location of that host.
-
T1680 Local Storage Discovery Discovery
What they do: LockBit 3.0 can enumerate local drive configuration.
What that means: Adversaries may enumerate local drives, disks, and/or volumes and their attributes like total or free space and volume serial number.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: LockBit 3.0 can use SMB for lateral movement.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1071.001 Web Protocols Command and Control
What they do: LockBit 3.0 can use HTTP to send victim host information to C2.
What that means: Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic.
-
T1132.001 Standard Encoding Command and Control
What they do: LockBit 3.0 can Base64-encode C2 communication.
What that means: Adversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect.
-
T1573.001 Symmetric Cryptography Command and Control
What they do: LockBit 3.0 can encrypt C2 communications with AES.
What that means: Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol.
-
T1486 Data Encrypted for Impact Impact
What they do: LockBit 3.0 can encrypt targeted data using the AES-256, ChaCha20, or RSA-2048 algorithms.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: LockBit 3.0 can terminate targeted processes and services related to security, backup, database management, and other applications that could stop or interfere with encryption.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: LockBit 3.0 can delete volume shadow copies.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (51)
▼Software Lockbit3 has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
Gosecretsdump
LaZagne
LostMyPassword
Mimikatz
NirSoft ExtPassword
PasswordFox
ProcDump
Veeam-Get-Creds
Defense evasion
Backstab/Process Explorer driver (BYOVD)
Defender Control
GMER
PCHunter
PowerTool
ProcessHacker
TDSSKiller
Discovery & enumeration
AdFind
Advanced IP Scanner
Advanced Port Scanner
Bloodhound
Seatbelt
SoftPerfect NetScan
Exfiltration
Anonfiles
FileZilla
FreeFileSync
File[.]io
MEGA
RClone
Sendspace
Temp[.]sh
Tempsend
Transfert-my-files
Transfer[.]sh
WinSCP
LOLBAS (living-off-the-land binaries)
BCDEdit
PsExec
Networking & tunnelling
Ligolo
Ngrok
Plink
Offensive security tooling
Cobalt Strike
Impacket
Koadic
Metasploit
PowerShell Empire
ThunderShell
Remote monitoring & management
Action1
AnyDesk
FixMeIt
ScreenConnect
Splashtop
TeamViewer
ZohoAssist
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Victims (2022)
Search, filter and paginate the victim timeline for Lockbit3. Showing 501–600 of 2022.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | noe.wifi.at id10672 View details | Austria | Other | — | ||
|
noe.wifi.at |
||||||
| Ransomware | ksa-architecture.com id10671 View details | United States | Construction / Real Estate | — | ||
|
1 terabyte of private information, projects, construction schemes including Bank schemes |
||||||
| Ransomware | semesco.com id10669 View details | Cyprus | Manufacturing / Engineering | — | ||
|
SEMESCO CO. Ltd was established in 1991 and is a rapidly expanding firm in the field of Specialist Electromechanical and Marine Engineering Services. |
||||||
| Ransomware | ultraflexx.com id10668 View details | United States | Communication / Marketing | — | ||
|
Our mission is to provide the world's largest, most reliable and compliant inventory of digitally printable textiles and flexible substrates. |
||||||
| Ransomware | tgestiona.br id10667 View details | Brazil | Other | — | ||
|
Tgestiona Logística Company |
||||||
| Ransomware | philogen.com id10666 View details | Italy | IT | — | ||
|
Philogen Spaphilogen.comPhilogen is a biotechnology company with a mission to innovate the treatment of cancer and other serious conditions. |
||||||
| Ransomware | prima.com id10665 View details | United States | Communication / Marketing | — | ||
|
We're dedicated to growing, packing, and shipping high-quality stone fruits from the heart of California, so you can enjoy the best peaches, plums, nectarines, and apricots our orchards have to offer. |
||||||
| Ransomware | logtainer.com id10664 View details | Italy | Transportation / Travel / Logistics | — | ||
|
Logtainer means high quality transport: easy, efficient and sustainable. The company was established early in 1997 and has been growing ever since, becoming one of the most active private operators on Italian railways. In 2021, Logtainer's turnover w... |
||||||
| Ransomware | portline.pt id10663 View details | Portugal | Transportation / Travel / Logistics | — | ||
|
Portline Transportes Marítimos Internacionais, SA., often simply called Portline is a Portuguese shipping company. The company has diverse business activities, including dry bulk, containerised, and break-bulk cargo shipping, shipping agency, forward... |
||||||
| Ransomware | cxm.com id10661 View details | United States | Finance / Legal / Insurance | — | ||
|
Chicago Extruded MetalsFinance (budget, audit, cash flow, balance sheet, tax returns, project calculations, YTD reports, bank statements and many other financial documents) Employees (personal data of employees, contracts, information on salaries,... |
||||||
| Ransomware | pbwtulsa.com id10657 View details | United States | Finance / Legal / Insurance | — | ||
|
Data on lawyers/employees (ssn, ein, residential address, DOB, contracts, scans of passports and ID), financial documents (balance sheet, audits, tax forms, various financial statements, statements),Client databases, client cases containing confide... |
||||||
| Ransomware | manitou-group.com id10653 View details | France | Construction / Real Estate | — | ||
|
Manitou Group, headquartered in France, is a heavy equipment manufacturer specializing in forklifts, telehandlers, aerial work platforms, and warehousing equipment.400GBSpecification, drawings of equipment elements and parts, developments, source... |
||||||
| Ransomware | lexcaribbean.com id10651 View details | Trinidad and Tobago | Finance / Legal / Insurance | — | ||
|
Lex Caribbean was founded in 1997 and is a leading law firm practising the laws of multiple jurisdictions in the Caribbean, including Barbados, Jamaica, Trinidad and Tobago, St Lucia and the Federation of St. Kitts and Nevis. We also coordinate legal... |
||||||
| Ransomware | gatesshields.com id10643 View details | United States | Construction / Real Estate | — | ||
|
Documents and data in the amount of 400 GB. The documents contain data of more than 1000 clients: Personal data, addresses, telephone numbers, SSN, EIN. Types of documents: Customer loan agreements, real estate documents, wills, police arrest reports... |
||||||
| Ransomware | manchesterfertility.com id10642 View details | United Kingdom | Communication / Marketing | — | ||
|
Manchester Fertility is a long-established, trusted fertility clinic with true heritage - in the early days of IVF we were instrumental in its widespread development. Our founder Professor Brian Lieberman launched the UK's first, fully-funded NHS IVF... |
||||||
| Ransomware | stemcor.com id10641 View details | United Kingdom | Manufacturing / Engineering | — | ||
|
STEMCOR is a leading independently run service provider for the steel industry. |
||||||
| Ransomware | bandcllp.com id10638 View details | United States | Public Sector | — | ||
|
Baldessari & Coster LLP is a full-service Certified Public Accounting firm licensed in NY. All our CPA's hold valid NY State CPA Certificates. |
||||||
| Ransomware | taloninternational.com id10637 View details | United States | Communication / Marketing | — | ||
|
Talon International300GBClients (customer database with addresses, phone numbers, information on calculations, to whom and where products are delivered, NDA, contracts, approved design for each client, color scheme, sources, for brands 7FAM, Calv... |
||||||
| Ransomware | mnorch.org id10632 View details | United States | Other | — | ||
|
Led by Music Director Thomas Søndergård, the Minnesota Orchestra is a Grammy Award-winning orchestra known for acclaimed performances around the world. |
||||||
| Ransomware | apeagers.au id10631 View details | New Zealand | Manufacturing / Engineering | — | ||
|
Part #1 Eagers Automotive Limited is the leading automotive retail group in Australia and New Zealand, with a long and proud history of 110 years. Our name was changed to Eagers Automotive Limited from A.P. Eagers Limited in 2020 following our acquis... |
||||||
| Ransomware | derrama.org.pe id10630 View details | Peru | Communication / Marketing | — | ||
|
Pídelo Aquí Maestro, accede a todos los servicios que tenemos para ti Derrama Magisterial es una institución de seguridad social privada, perteneciente a los maestros que trabajan en las instituciones educativas del Estado. |
||||||
| Ransomware | sahchicago.org id10619 View details | United States | Healthcare / Pharma | — | ||
|
PART 1 .Always US Hospitals put their greedy interest over those of their patients and clients .Saint Anthony Hospital has been caring for its neighbors for over a century.Saint Anthony Hospital is an independent, nonprofit, faith-based, ac... |
||||||
| Ransomware | mrm.com.mx id10618 View details | Mexico | Communication / Marketing | — | ||
|
En MRM somos mayoristas líderes en el mercado de refacciones, accesorios y equipo de protección para las motocicletas de trabajo con mayor demanda en México. Nos enfocamos en atender refaccionarias, boutiques y corporativos que buscan ofrecer calidad... |
||||||
| Ransomware | clackamas.edu id10608 View details | United States | Education | — | ||
|
Clackamas Community College |
||||||
| Ransomware | grimme.dk id10605 View details | Denmark | Other | — | ||
|
grimme.dk |
||||||
| Ransomware | ese.com id10604 View details | Germany | Services | — | ||
|
ESE is the market leader for temporary storage solutions for waste and recyclable materials. We offer a large selection of high-quality products and services, which enable our customers in the waste management industry to streamline their processes a... |
||||||
| Ransomware | crowe.com.za id10603 View details | South Africa | Finance / Legal / Insurance | — | ||
|
Crowe LLP is a public accounting, consulting and technology firm. Crowe uses its deep industry expertise to provide audit servicesto public and private entities. The firm and its subsidiaries also help clients make smart decisions that lead to lastin... |
||||||
| Ransomware | ehsd.org id10583 View details | United States | Finance / Legal / Insurance | — | ||
|
Contra Costa County Employment & Human ServicesEmployees (lists with SSN numbers, residential address, telephone, email, passport scans, DOB, contracts, information on salaries, bonuses, and other confidential documents) Finance (budget, audit, tax... |
||||||
| Ransomware | securinux.net id10577 View details | Israel | Services | — | ||
|
Securinux Specializes in 'Linux' Based Security Applications including - Firewall and A variety of Internet Solutions.The company was hacked, and they refused to comply. Internal papers totaling 35 GB will be disclosed. |
||||||
| Ransomware | caravanclub.co.uk id10566 View details | United Kingdom | Other | — | ||
|
The Caravan and Motorhome Club |
||||||
| Ransomware | icn-artem.com id10555 View details | France | Education | — | ||
|
ICN Business School is a Grande Ecole of management (selective higher education institutions, which provide high-level training) triple accredited AACSB, EQUIS and AMBA. Associated with the University of Lorraine, the school is authorized to issue a... |
||||||
| Ransomware | lyonshipyard.com id10533 View details | United States | Other | — | ||
|
Lyon Shipyard is a customer focused, family-owned and operated, ship repair facility on the Elizabeth River in Norfolk, VA established in 1928. Lyon Shipyard, Inc. serves as a full service ship repair facility with over 90 years of continuous servic... |
||||||
| Ransomware | sierrafrontgroup.com id10532 View details | United States | Telecommunications | — | ||
|
Sierra Front Group has experience providing Cloud Hosting, Event Wi-Fi, Email Hosting, Web Hosting, Network Design, IT Consulting, and much more. |
||||||
| Ransomware | davidsbridal.com id10510 View details | United States | Retail / E-commerce | — | ||
|
David's Bridal. Revenue $2.2 BillionWe possess highly valuable and critical data, encompassing a substantial volume of personal and corporate information.David's Bridal is a prominent American bridal-store chain known for its wide range of weddin... |
||||||
| Ransomware | synnex-grp.com id10500 View details | Taiwan, Province of China | Communication / Marketing | — | ||
|
Synnex Technology International Corporation (SYNNEX) was established in 1988. Through a unique operational model, it has become the largest distributor of information, communication, consumer product, and semiconductor products in the Asia Pacific re... |
||||||
| Ransomware | gattoplaters.com id10499 View details | United States | Manufacturing / Engineering | — | ||
|
King KongGatto is now home to North America’s largest zinc plating line – King Kong!PrevNextISO 9001:2015 CERTIFIED ZINC PLATING COMPANYFounded in 1974, Gatto Industrial Platers is an ISO 9001:2015 Certified Plating Company focused on being... |
||||||
| Ransomware | duconind.com id10498 View details | United Arab Emirates | Other | — | ||
|
Ducon Industries: Leading blocks & paver supplier in Dubai |
||||||
| Ransomware | wittmann.at id10497 View details | Austria | Communication / Marketing | — | ||
|
Das Unternehmen wurde 1896 als Sattlerei von Franz Wittmann gegründet. Am Anfang wurde für die Bauern der Umgebung Sattlerzeug hergestellt. Der Enkel Franz Wittmann stellte die Produktion auf Möbelbau und Polsterei um. Kunden kamen anfangs vorwiegend... |
||||||
| Ransomware | qtc-energy.com id10496 View details | Thailand | Energy | — | ||
|
manufactures and sells electrical transformers in Thailand and abroad. The company offers sealed oil dispensers, RPN devices, amorphous metal dispensers, dry type classes F and H, mounted on pads |
||||||
| Ransomware | hughessupplyco.com id10495 View details | United States | Manufacturing / Engineering | — | ||
|
WE ARE HUGHES SUPPLY! We are an injection molding & engineering company located in Thomasville, NC and serve companies across the United States. |
||||||
| Ransomware | umi-tiles.com id10494 View details | Thailand | Public Sector | — | ||
|
Saha mosaic Industry Public Company Limited was founded on June 6, 2016, listed on the stock exchange of Thailand 2016. it manufactures tiles sold under the brand “duragres", which means strong and durable tiles. it is a leader in the use of digital... |
||||||
| Ransomware | cct.or.th id10493 View details | Thailand | Other | — | ||
|
a company that works in the Religious Institutions industry |
||||||
| Ransomware | cmmt.com.tw id10492 View details | Taiwan, Province of China | Other | — | ||
|
cmmt.com.tw |
||||||
| Ransomware | shenandoahtx.us id10491 View details | United States | Public Sector | — | ||
|
Shenandoah is a city in Montgomery County, Texas, United States. Its population was 3,499 at the 2020 census. It is the hometown of David Vetter, the famous "boy in the plastic bubble". In 1986, the Shenandoah city council renamed Tamina School Road... |
||||||
| Ransomware | stjohnrochester.org id10490 View details | United States | Education | — | ||
|
John Lutheran Church & SchoolAddress: 1011 W University Dr Rochester, MI, 48307-1862 United States |
||||||
| Ransomware | bmc-cpa.com id10489 View details | United States | Finance / Legal / Insurance | — | ||
|
The management team of partners Don Beasley, Christine Wright, Brad Beasley, Tony Morán, and Christopher Salcido, along with our tax & audit managers, have over 400 years of accounting experience! We have represented our clients before state & nation... |
||||||
| Ransomware | jasman.com.mx id10488 View details | Mexico | Manufacturing / Engineering | — | ||
|
Jasman Automotriz S A is a company that operates in the Automotive industry. The company is headquartered in Las Torres, Nuevo Leon, Mexico |
||||||
| Ransomware | subway.com id10484 View details | United States | Finance / Legal / Insurance | — | ||
|
The biggest sandwich chain is pretending that nothing happened. We exfiltrated their SUBS internal system which includes hundreds of gigabytes of data and all financial expects of the franchise, including employee salaries, franchise royalty payment... |
||||||
| Ransomware | tvjahnrheine.de id10483 View details | Germany | Healthcare / Pharma | — | ||
|
TV Jahn-Rheine is a company that operates in the Health, Wellness and Fitness industry. The company is headquartered in Rheine, Nordrhein-Westfalen, Germany.We have stolen a ton of accounting data, email conversations, human resources, etc. |
||||||
| Ransomware | marxan.es id10482 View details | Spain | Construction / Real Estate | — | ||
|
https://www.einforma.com/informacion-empresa/marxan#ancla-datos-comercialesTHE OPERATION OF CAR PARKS, OWNED AND OWNED BY OTHERS, CONSTRUCTION, LEASING, PURCHASE AND SALE THEREOF, ADMINISTRATION AND OPERATION OF ALL TYPES OF CAR PARKS, THE CONSTR... |
||||||
| Ransomware | home-waremmien.be id10481 View details | Belgium | Construction / Real Estate | — | ||
|
Created in 1949 by Edmond Leburton, the public housing company "Le Home Waremmien" has just been renamed. The name change comes a year after the (historic) arrival of a Liberal as president. |
||||||
| Ransomware | wendy.mx id10480 View details | Mexico | Public Sector | — | ||
|
We give 5 days for wendy's company to contact us. After that time, 530 GB of internal company information will be publicly available. |
||||||
| Ransomware | swiftair.com id10479 View details | Spain | Transportation / Travel / Logistics | — | ||
|
Swiftair is a leading company in the airline sector, offering both freight and passenger transport. Unfortunately, they dont care at all about the security of corporate information and personal information of its employees. We give them the last chan... |
||||||
| Ransomware | pratt.edu id10476 View details | United States | Communication / Marketing | — | ||
|
Colleges & UniversitiesEstablished in 1887 and located in Brooklyn, New York, the Pratt Institute is a private university with programs primarily in engineering, architecture, and fine arts. |
||||||
| Ransomware | seiu1000.org id10475 View details | United States | Public Sector | — | ||
|
Local 1000 of the Service Employees International Union is a united front of 96,000 working people employed by the State of California, making Local 1000 the largest public sector union in California and one of the largest in the country. 308GBEm... |
||||||
| Ransomware | dywidag.com id10473 View details | Germany | Other | — | ||
|
No additional victim description available. |
||||||
| Ransomware | jdbchina.com id10471 View details | China | Hospitality / Food & Beverage / Tourism | — | ||
|
Greetings!Today we are posting here the new company, "JDB China Drinks Co Ltd ".Company Description: JDB China Drinks Co. Ltd. manufactures beverages. The Company produces and sells herbal tea and other related beverages. JDB China Drinks als... |
||||||
| Ransomware | evit.edu id10467 View details | United States | Education | — | ||
|
East Valley Institute of Technology |
||||||
| Ransomware | foxsemicon.com id10464 View details | Taiwan, Province of China | IT | — | ||
|
Foxsemicon Integrated Technology Inc. takes semiconductor equipment manufacturing capabilities as the foundation; Mechanical, Optical, Electrical, and Software technologies as the pillar; and builds a leading edge in R&D and manufacturing of high-end... |
||||||
| Ransomware | digipwr.com id10454 View details | United States | Energy | — | ||
|
Digital Power is an innovative leader and supplier of cutting-edge power product solutions for medical, industrial, telecom, and defense markets. The company is recognized throughout the industry for flexible, cutting-edge, feature-rich, top-quality... |
||||||
| Ransomware | jaffeandasher.com id10453 View details | United States | Finance / Legal / Insurance | — | ||
|
653 GB Data on employees (ssn, insurance, residential address, telephone, DOB, contracts, scans of passports), financial documents (balance sheet, budget, PL, audits, tax forms, various financial statements, statements), customer database, client c... |
||||||
| Ransomware | millgate.co.uk id10439 View details | United Kingdom | Other | — | ||
|
No additional victim description available. |
||||||
| Ransomware | shinwajpn.co.jp id10431 View details | Japan | Manufacturing / Engineering | — | ||
|
Manufacturing around the worldSupported by engineering power Shinwa is supported by the engineering power of trading company and manufacturer functions.A solution partner that responds to manufacturing issues. |
||||||
| Ransomware | maisonsdelavenir.com id10430 View details | France | Communication / Marketing | — | ||
|
Maisons de l’Avenir, house builder in Brittany and Loire-Atlantique, presents its house offers in your area. |
||||||
| Ransomware | vasudhapharma.com id10429 View details | India | Healthcare / Pharma | — | ||
|
VASUDHA PHARMA CHEM LIMITED was incorporated, as a public limited company under the Companies Act, 1956 in 1994-95 at Hyderabad in the state of Telengana, India. The company is engaged in the manufacturing of APIs, Pharma Intermediates for catering t... |
||||||
| Ransomware | hosted-it.co.uk id10428 View details | United Kingdom | Communication / Marketing | — | ||
|
Originally founded to provide consultancy to IT resellers, we are delighted to now provide our IT services directly to Education, Corporate, and Government organisations. |
||||||
| Ransomware | amenitek.com id10420 View details | United States | IT | — | ||
|
AMENITEKAudio, Technology, Video, Computer, Security, and Electrical Systems Installation14 Williamstown RoadLanesborough, MA 01237tel (413) 776-0354fax (413) 776-0355https://i.imgur.com/UdvPFB2.pnghttps://i.imgur.com/sjsVUFe.pngh... |
||||||
| Ransomware | turascandinavia.com id10419 View details | Sweden | Telecommunications | — | ||
|
Several vulnerabilities were found in Tura Scandinavia's corporate network, which helped us to penetrate the corporate network and move around the internal servers without any obstacles.Inside the corporate network of Tura Scandinavia there were ab... |
||||||
| Ransomware | arrowinternational.com id10414 View details | United States | NGOs / Associations | — | ||
|
World's largest manufacturer of bingo products, pulltabs, daubers, bingo equipment and hand held and fixed base electronic bingo devices for charity fundraising and social gaming. |
||||||
| Ransomware | olea.com id10409 View details | United States | Other | — | ||
|
Olea Kiosks Inc. is the leading Kiosk design and manufacturer of standard and custom Kiosks. For over 40 years. |
||||||
| Ransomware | pactchangeslives.com id10391 View details | United States | Communication / Marketing | — | ||
|
PACT operates in an open, collaborative partnership with other agencies and resources to solve the problems that stem from criminal behavior. We challenge individuals and organizations to become part of the solution and invite you to join us. |
||||||
| Ransomware | hartalega.com.my id10384 View details | Malaysia | Manufacturing / Engineering | — | ||
|
The history of Hartalega began in 1988. Our insatiable drive to continually outperform ourselves has transformed what began as a single-line manufacturing facility into what we are today—the largest manufacturer of nitrile gloves in the world, with a... |
||||||
| Ransomware | agnesb.eu id10383 View details | France | Other | — | ||
|
www.agnesb.co.jp www.agnesb.com.hk Agnès b. is a French fashion house founded in 1975 by Agnès b.. The company offers a wide range of clothing, accessories, and home goods. Agnès b. is known for its casual, timeless style. |
||||||
| Ransomware | twt.co.za id10382 View details | South Africa | Communication / Marketing | — | ||
|
Tiger Wheel & Tyre is committed to providing consumers with expert advice, superior fitment services and products from leading brands in wheels, tyres and batteries. Tiger Wheel & Tyre – part of TiAuto Investments (PTY) Ltd is committed to providing... |
||||||
| Ransomware | tiautoinvestments.co.za id10381 View details | South Africa | Finance / Legal / Insurance | — | ||
|
Found in 2006 and headquartered in Midrand, South Africa, TiAuto is a holding company of South Africa brands in the retail and wholesale wheels, tires and automotive products |
||||||
| Ransomware | mciwv.com id10369 View details | United States | Other | — | ||
|
https://mega.nz/folder/3h531ByC#sv5kMsOSqL2xqEkLBUWI_g |
||||||
| Ransomware | morganpilate.com id10368 View details | United States | Healthcare / Pharma | — | ||
|
It’s where we work every day. We have successfully defended clients against a wide variety of federal charges, including: Wire fraud Bank fraud Procurement fraud Healthcare fraud Money laundering Structuring Mortg... |
||||||
| Ransomware | capitalhealth.org id10367 View details | United States | Healthcare / Pharma | — | ||
|
We purposely didn't encrypt this hospital so as not to interfere with patient care. We just stole over 10 million files. Over 7 terabytes of medical confidentiality data valued at $250,000. That's all you need to know about this hospital.Capital... |
||||||
| Ransomware | ips-securex.com id10357 View details | Singapore | Services | — | ||
|
Formed in 1991 and with offices and partners throughout Asia Pacific, IPS Securex has successfully implemented many complex integrated security systems throughout the region and has established a reputation for delivering customized solutions on time... |
||||||
| Ransomware | groupe-idea.com id10349 View details | France | Transportation / Travel / Logistics | — | ||
|
IDEA's holding company is a cooperative and participatory company (SCOP) with an independent and non-transferable shareholding structure.The group deploys its expertise in 5 areas of activity: logistics, bulk logistics, industrial transport, shippi... |
||||||
| Ransomware | contimade.cz id10335 View details | Czechia | Manufacturing / Engineering | — | ||
|
Since 1993, we have been engaged in the production of containers and the development of modular solutions, which are currently being used throughout Europe, namely in Germany, Iceland, Belgium, Switzerland, Lithuania, the Netherlands, Scandinavia, th... |
||||||
| Ransomware | eagersautomotive.com.au id10334 View details | Australia | Manufacturing / Engineering | — | ||
|
Eagers Automotive Limited is the leading automotive retail group in Australia and New Zealand, with a long and proud history of 110 years. |
||||||
| Ransomware | krijnen.be id10330 View details | Belgium | Services | — | ||
|
In 1977, Jos converted the business into a PVBA with the name “Krijnen Keukens”. In 1979, son Eddy Krijnen joined the business. Together they further expand the company. |
||||||
| Ransomware | hoffmanestates.org id10318 View details | Construction / Real Estate | — | |||
|
Village of Hoffman Estates |
||||||
| Ransomware | coastalplainsctr.org id10317 View details | Healthcare / Pharma | — | |||
|
Coastal Plains Integrated Health is a not-for-profit Behavioral Health Center that serves individuals with Mental Health Needs |
||||||
| Ransomware | richmont.edu id10305 View details | United States | Education | — | ||
|
Greetings!Today we are posting here the new company, "Richmont Graduate University".Company Description: Richmont Graduate University is a nonprofit organization providinggraduate education in the fields of professional counseling, mental h... |
||||||
| Ransomware | coaxis.com id10304 View details | France | IT | — | ||
|
Coaxis provides CPA Firms with a fully-hosted and managed network solution designed to remove the complexities of federal and industry compliances, curb the demands of information technology infrastructure, and greatly minimize the threat of cybercri... |
||||||
| Ransomware | smbw.com.au id10303 View details | Australia | Communication / Marketing | — | ||
|
Smash Repair Leaders in Prestige Vehicle Smash Repair Get A Quote Fill in this form or call 9212 3566 to receive a quote Is the car driveable? Trust Our Quality Workmanship Like these car makers do. We are certified repairers for: Why Scientific? |
||||||
| Ransomware | co.pickens.sc.us id10294 View details | United States | Public Sector | — | ||
|
Welcome to Pickens County, SC |
||||||
| Ransomware | walkro.eu id10293 View details | Other | — | |||
|
No additional victim description available. |
||||||
| Ransomware | ontariopork.on.ca id10292 View details | Canada | Communication / Marketing | — | ||
|
Ontario Pork Producers’ Marketing Board (OPPMB or Ontario Pork), is the marketing board which represents the about 1700 producers who market hogs in the province of Ontario.[1][2] The office has been located in Guelph, Ontario since moving there from... |
||||||
| Ransomware | zrvp.ro id10291 View details | Romania | Communication / Marketing | — | ||
|
Zamfirescu Racoti Vasile & Partners advises businesses, financial institutions, governmental entities and private clients on a large spectrum of matters, providing the guidance they need to compete and grow in today’s business environment and to mana... |
||||||
| Ransomware | tecnifibre.com id10290 View details | Other | — | |||
|
Tecnifibre is a French manufacturer of sporting equipment, specializing in tennis and squash. It was founded in 1979 by the current CEO Thierry Maissant. |
||||||
| Ransomware | hendelsinc.com id10289 View details | Energy | — | |||
|
Hendels, Inc distributes petroleum and petroleum products. The Company offers gasoline, diesel, lubricant oil, and propane tanks. |
||||||
| Ransomware | bkf-fleuren.de id10281 View details | Germany | Communication / Marketing | — | ||
|
Unser Familienunternehmen BKF A. Fleuren GmbH wurde im Jahr 1974/75 als Fensterbauunternehmen gegründet und zählt heute rund 100 Mitarbeiter. Auf einer Produktionsfläche von über 20.000 Quadratmetern produzieren wir modernste Kunststofffenster und -T... |
||||||
| Ransomware | avescorent.ch id10280 View details | Switzerland | Energy | — | ||
|
For 30 years, we have taken up, day after day, a simple but demanding challenge: to successfully complete the requests entrusted to us. To do this, we rely on the experience of our employees, the reliability of our equipment and the power of our part... |
||||||
| Ransomware | zurcherodioraven.com id10275 View details | Costa Rica | Finance / Legal / Insurance | — | ||
|
For over 85 years we have created the leading law firm in Costa Rica, where tradition, innovation and excellence converge. |
||||||
| Ransomware | castores.com.mx id10270 View details | Mexico | Retail / E-commerce | — | ||
|
Transportes Castores tiene el firme propósito de lograr la satisfacción de sus clientes, proporcionándoles productos y servicios especializados de transporte terrestre y logística de mercancías y productos, con altos niveles de calidad y seguridad. |
||||||
| Ransomware | ciasc.mx id10268 View details | Mexico | Finance / Legal / Insurance | — | ||
|
Our firm Consultores y Investigadores en Administración, S.C. was founded in 1993. Today we specialize in Credit Investigation and Portfolio Recovery services through the out-of-court and judicial route. From our beginning we have always sought the s... |
||||||
| Ransomware | csmsa.com.ar id10267 View details | Argentina | Manufacturing / Engineering | — | ||
|
Since 1961 we have worked uninterruptedly to offer the best service in engineering applied to the movement of large parts and components, we are pioneers in the industry. |
||||||