Ransomware Group intelligence

Lockbit5

Active

Track Lockbit5 with 401 published victims and 23 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 401 Known published victims in this dataset
First discovered 2025-12-07 Earliest victim discovery date
Last discovered 2026-09-10 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 72 victims
Known locations 23 Leak or negotiation infrastructure tracked

Overview

Lockbit5 is tracked by Breach House as a ransomware group with 401 published victims.

United States is currently the most targeted country in this dataset.

23 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 132 85.7%
  • Pending 21 13.6%
  • Deleted 1 0.6%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (23)

    Label Type Availability Links
    Leak location 23 Onion service Up checked 5h ago lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion
    Leak location 21 Onion service Up checked 5h ago lockbitynxdcxtuvma5deq5pxtnqoacftuigkk37xjq3whefozdpcuad.onion
    Leak location 19 Onion service Up checked 5h ago lockbity3v2rhjjjt6opcgvdrrlvdbrt3p2wqmxmq4cm36cchphdy6qd.onion
    Leak location 20 Onion service Up checked 5h ago lockbity44loulvujiaoels7knti2tfsnglclnse22syaa6x3vpqp7yd.onion
    Leak location 18 Onion service Up checked 5h ago lockbitqth2ij5cdqmj4cdchoh3etnlbh74utqviwqb5svvhxygnmoqd.onion
    Leak location 17 Onion service Up checked 5h ago lockbitotfzuq2lpyydzgbhelps2mcz62cpix4nzpcyaak5444iwfmqd.onion
    Leak location 12 Onion service Up checked 5h ago lockbitgf43c7avhx5wesx5ambjgbormhwc2tujsy6lvg6drkjhnjryd.onion
    Leak location 9 Onion service Up checked 5h ago lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
    Leak location 6 Onion service Up checked 5h ago lockbitabmbzz652qeqd7yztgugcihpy4s4f6zuqi3jx32rzjylsn7ad.onion
    Leak location 7 Onion service Up checked 5h ago lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
    Leak location 2 Onion service Up checked 5h ago lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion
    Leak location 1 Onion service Up checked 5h ago lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion
    Leak location 22 Onion service Down checked 5h ago lockbityq64mwtobqqcr3iwxs5q4o7iliuv72gbx4vflggj4m4wqekad.onion
    Leak location 16 Onion service Down checked 5h ago lockbitnpobu6luzzlxb7br5uyqnmeruwimpjuw2kv442nvxd6sufsad.onion
    Leak location 15 Onion service Down checked 5h ago lockbitkybiqhyv64vdaamz7uf2ymjoafyalx3e6spmmsz5xyk5nbcad.onion
    Leak location 14 Onion service Down checked 5h ago lockbitjqfuyrkxiie6bcly6ow4sh6lmyuyvyats5hcpe5e6hbuhikyd.onion
    Leak location 13 Onion service Down checked 5h ago lockbithn5a2qgf4ojvut3q25yylrauvjxrz6sjdd4teas65osru2lqd.onion
    Leak location 11 Onion service Down checked 5h ago lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
    Leak location 10 Onion service Down checked 5h ago lockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion
    Leak location 8 Onion service Down checked 5h ago lockbitdx4kanolaotenc3nmonlxv5enmhxdh2lk54rirvcdsljfbjyd.onion
    Leak location 5 Onion service Down checked 5h ago lockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onion
    Leak location 3 Onion service Down checked 5h ago lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
    Leak location 4 Onion service Down checked 5h ago lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion

    Top Activity Sectors (17)

    Victims (401)

    Search, filter and paginate the victim timeline for Lockbit5. Showing 1–100 of 401.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware alphaomega-eng.com id32749 View details Germany Manufacturing / Engineering pending
    Ransomware alphaomega-eng.com id32749 View details Germany Manufacturing / Engineering pending
    Ransomware amorsaude.com.br id32725 View details Brazil Services pending
    Ransomware amorsaude.com.br id32725 View details Brazil Services pending
    Ransomware fdcputman.nl id32683 View details Netherlands Services pending
    Ransomware fdcputman.nl id32683 View details Netherlands Services pending
    Ransomware contreras.com.ar id32684 View details Argentina Transportation / Travel / Logistics pending
    Ransomware contreras.com.ar id32684 View details Argentina Transportation / Travel / Logistics pending
    Ransomware vsbattorneys.co.za id32671 View details South Africa Finance / Legal / Insurance pending
    Ransomware vsbattorneys.co.za id32671 View details South Africa Finance / Legal / Insurance pending
    Ransomware pscindustries.com id32588 View details United States Manufacturing / Engineering pending
    Ransomware pscindustries.com id32588 View details United States Manufacturing / Engineering pending
    Ransomware kalahealth.eu id32589 View details Germany Healthcare / Pharma pending
    Ransomware kalahealth.eu id32589 View details Germany Healthcare / Pharma pending
    Ransomware huisartsencentrumkleiniterson.nl id32590 View details Netherlands Healthcare / Pharma leaked
    Ransomware huisartsencentrumkleiniterson.nl id32590 View details Netherlands Healthcare / Pharma leaked
    Ransomware svfcu.org id32370 View details United States Services pending
    Ransomware svfcu.org id32370 View details United States Services pending
    Ransomware hoaattorneys.com id32369 View details United States Finance / Legal / Insurance pending
    Ransomware hoaattorneys.com id32369 View details United States Finance / Legal / Insurance pending
    Ransomware bartelsbv.nl id32320 View details Netherlands Services pending
    Ransomware bartelsbv.nl id32320 View details Netherlands Services pending
    Ransomware vkj.nl id32321 View details Netherlands Other leaked
    Ransomware vkj.nl id32321 View details Netherlands Other leaked
    Ransomware allsteelproducts.nl id32322 View details Netherlands Manufacturing / Engineering pending
    Ransomware allsteelproducts.nl id32322 View details Netherlands Manufacturing / Engineering pending
    Ransomware bkc.org id32323 View details Japan Other pending
    Ransomware bkc.org id32323 View details Japan Other pending
    Ransomware apatpa.com id32252 View details Mexico IT pending
    Ransomware apatpa.com id32252 View details Mexico IT pending
    Ransomware tnmed.org id32220 View details Tunisia Healthcare / Pharma pending
    Ransomware tnmed.org id32220 View details Tunisia Healthcare / Pharma pending
    Ransomware tnmed.org id32220 View details United States Healthcare / Pharma pending
    Ransomware fpmanagement.nl id32205 View details Netherlands Services deleted
    Ransomware fpmanagement.nl id32205 View details Netherlands Services deleted
    Ransomware theheartcenterofmemphis.com id32195 View details United States Healthcare / Pharma pending
    Ransomware theheartcenterofmemphis.com id32195 View details United States Healthcare / Pharma pending
    Ransomware dece.cz id32196 View details Czechia Other leaked
    Ransomware dece.cz id32196 View details Czechia Other leaked
    Ransomware takt.be id32197 View details Belgium Services pending
    Ransomware takt.be id32197 View details Belgium Services pending
    Ransomware adt.com id32058 View details United States Telecommunications leaked
    Ransomware adt.com id32058 View details United States Telecommunications leaked
    Ransomware icnavais.com id31951 View details Portugal pending
    Ransomware usbank.com id31861 View details United States leaked
    Ransomware terra-petra.com id31813 View details Germany leaked
    Ransomware actua.fr id31759 View details France IT leaked
    Ransomware actua.fr id31759 View details France IT leaked
    Ransomware dupouy-associes.fr id31760 View details France Finance / Legal / Insurance leaked
    Ransomware dupouy-associes.fr id31760 View details France Finance / Legal / Insurance leaked
    Ransomware agricolagalbusera.it id31761 View details Italy leaked
    Ransomware tecosim.com id31762 View details Germany leaked
    Ransomware vgrn.de id31763 View details Germany leaked
    Ransomware briggsplc.com id31338 View details United Kingdom leaked
    Ransomware sirsa.it id31170 View details Italy IT pending
    Ransomware sirsa.it id31170 View details Italy IT pending
    Ransomware sms-sme.com id31171 View details Romania IT
    Ransomware sms-sme.com id31171 View details Romania IT
    Ransomware adventusasia.com id31172 View details Singapore Education
    Ransomware adventusasia.com id31172 View details Singapore Education
    Ransomware pcclimitedindia.com id31173 View details India Construction / Real Estate
    Ransomware pcclimitedindia.com id31173 View details India Construction / Real Estate
    Ransomware delkartindustries.com id31174 View details Manufacturing / Engineering
    Ransomware delkartindustries.com id31174 View details Manufacturing / Engineering
    Ransomware micropack.com.ar id31175 View details Argentina Manufacturing / Engineering
    Ransomware micropack.com.ar id31175 View details Argentina Manufacturing / Engineering
    Ransomware setic-pourtier.com id31176 View details France Manufacturing / Engineering
    Ransomware setic-pourtier.com id31176 View details France Manufacturing / Engineering
    Ransomware microphase.com id31177 View details United States Manufacturing / Engineering pending
    Ransomware microphase.com id31177 View details United States Manufacturing / Engineering pending
    Ransomware rai.com.br id31178 View details Brazil Telecommunications
    Ransomware rai.com.br id31178 View details Brazil Telecommunications
    Ransomware bancrofteng.com id30466 View details United Kingdom Manufacturing / Engineering
    Ransomware bancrofteng.com id30466 View details United Kingdom Manufacturing / Engineering
    Ransomware magna.com.do id30467 View details Dominican Republic Transportation / Travel / Logistics leaked
    Ransomware magna.com.do id30467 View details Dominican Republic Transportation / Travel / Logistics leaked
    Ransomware giesdl.de id30468 View details Germany IT leaked
    Ransomware giesdl.de id30468 View details Germany IT leaked
    Ransomware jshotels.com id30469 View details Jordan Hospitality / Food & Beverage / Tourism leaked
    Ransomware jshotels.com id30469 View details Jordan Hospitality / Food & Beverage / Tourism leaked
    Ransomware hotel-bourse.com id30470 View details France Hospitality / Food & Beverage / Tourism leaked
    Ransomware hotel-bourse.com id30470 View details France Hospitality / Food & Beverage / Tourism leaked
    Ransomware abianchini.es id30471 View details Spain Retail / E-commerce leaked
    Ransomware abianchini.es id30471 View details Spain Retail / E-commerce leaked
    Ransomware comtri.de id30472 View details Germany IT
    Ransomware comtri.de id30472 View details Germany IT
    Ransomware mediaservicemaastricht.nl id30473 View details Netherlands IT leaked
    Ransomware mediaservicemaastricht.nl id30473 View details Netherlands IT leaked
    Ransomware ravagnan.com id30474 View details Italy Manufacturing / Engineering leaked
    Ransomware ravagnan.com id30474 View details Italy Manufacturing / Engineering leaked
    Ransomware probat.ag id30009 View details Germany Manufacturing / Engineering leaked
    Ransomware eternal.hk id30010 View details Hong Kong Finance / Legal / Insurance pending
    Ransomware 5deagosto.com.br id30011 View details Brazil Retail / E-commerce leaked
    Ransomware abandw.com id30012 View details ND IT leaked
    Ransomware ag-360.ca id30013 View details Canada Agriculture / Food leaked
    Ransomware elematic.com id30014 View details Finland Manufacturing / Engineering leaked
    Ransomware amc.co.th id30015 View details Thailand Finance / Legal / Insurance leaked
    Ransomware casaandina.com.co id30016 View details Colombia Hospitality / Food & Beverage / Tourism leaked
    Ransomware bvi.co.bw id30017 View details Botswana Transportation / Travel / Logistics leaked
    Ransomware comta.com.tw id30018 View details Taiwan, Province of China Manufacturing / Engineering leaked