Ransomware Group intelligence

Lockbit5

Active

Track Lockbit5 with 401 published victims and 23 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 401 Known published victims in this dataset
First discovered 2025-12-07 Earliest victim discovery date
Last discovered 2026-09-10 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 72 victims
Known locations 23 Leak or negotiation infrastructure tracked

Overview

Lockbit5 is tracked by Breach House as a ransomware group with 401 published victims.

United States is currently the most targeted country in this dataset.

23 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 132 85.7%
  • Pending 21 13.6%
  • Deleted 1 0.6%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (23)

    Label Type Availability Links
    Leak location 23 Onion service Up checked 5m ago lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion
    Leak location 22 Onion service Up checked 5m ago lockbityq64mwtobqqcr3iwxs5q4o7iliuv72gbx4vflggj4m4wqekad.onion
    Leak location 21 Onion service Up checked 6m ago lockbitynxdcxtuvma5deq5pxtnqoacftuigkk37xjq3whefozdpcuad.onion
    Leak location 20 Onion service Up checked 6m ago lockbity44loulvujiaoels7knti2tfsnglclnse22syaa6x3vpqp7yd.onion
    Leak location 19 Onion service Up checked 6m ago lockbity3v2rhjjjt6opcgvdrrlvdbrt3p2wqmxmq4cm36cchphdy6qd.onion
    Leak location 18 Onion service Up checked 7m ago lockbitqth2ij5cdqmj4cdchoh3etnlbh74utqviwqb5svvhxygnmoqd.onion
    Leak location 16 Onion service Up checked 8m ago lockbitnpobu6luzzlxb7br5uyqnmeruwimpjuw2kv442nvxd6sufsad.onion
    Leak location 15 Onion service Up checked 8m ago lockbitkybiqhyv64vdaamz7uf2ymjoafyalx3e6spmmsz5xyk5nbcad.onion
    Leak location 14 Onion service Up checked 9m ago lockbitjqfuyrkxiie6bcly6ow4sh6lmyuyvyats5hcpe5e6hbuhikyd.onion
    Leak location 13 Onion service Up checked 9m ago lockbithn5a2qgf4ojvut3q25yylrauvjxrz6sjdd4teas65osru2lqd.onion
    Leak location 12 Onion service Up checked 10m ago lockbitgf43c7avhx5wesx5ambjgbormhwc2tujsy6lvg6drkjhnjryd.onion
    Leak location 11 Onion service Up checked 10m ago lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
    Leak location 10 Onion service Up checked 10m ago lockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion
    Leak location 9 Onion service Up checked 11m ago lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
    Leak location 7 Onion service Up checked 12m ago lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
    Leak location 6 Onion service Up checked 12m ago lockbitabmbzz652qeqd7yztgugcihpy4s4f6zuqi3jx32rzjylsn7ad.onion
    Leak location 4 Onion service Up checked 13m ago lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion
    Leak location 2 Onion service Up checked 13m ago lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion
    Leak location 3 Onion service Up checked 13m ago lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
    Leak location 1 Onion service Up checked 13m ago lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion
    Leak location 17 Onion service Down checked 8m ago lockbitotfzuq2lpyydzgbhelps2mcz62cpix4nzpcyaak5444iwfmqd.onion
    Leak location 8 Onion service Down checked 11m ago lockbitdx4kanolaotenc3nmonlxv5enmhxdh2lk54rirvcdsljfbjyd.onion
    Leak location 5 Onion service Down checked 6h ago lockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onion

    Top Activity Sectors (17)

    Victims (401)

    Search, filter and paginate the victim timeline for Lockbit5. Showing 101–200 of 401.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware daikyonishikawa.co.jp id30019 View details Japan Manufacturing / Engineering leaked
    Ransomware rubbercompounding.com id30020 View details Manufacturing / Engineering leaked
    Ransomware drwu.com id30021 View details China Healthcare / Pharma leaked
    Ransomware felizhotelboracay.com id30022 View details Philippines Hospitality / Food & Beverage / Tourism leaked
    Ransomware greyhighschool.com id30023 View details United States Education leaked
    Ransomware idefeey.yucatan.gob.mx id30024 View details Mexico Public Sector leaked
    Ransomware inspeqingenieria.com id30025 View details Mexico Manufacturing / Engineering leaked
    Ransomware majorcineplex.com id30026 View details Thailand Hospitality / Food & Beverage / Tourism leaked
    Ransomware parkviewtaipei.com id30027 View details Taiwan, Province of China Hospitality / Food & Beverage / Tourism leaked
    Ransomware ponce-benzo.com id30028 View details Puerto Rico Retail / E-commerce leaked
    Ransomware parampackaging.com id30029 View details Türkiye Manufacturing / Engineering leaked
    Ransomware primelinkbio.com id30030 View details United States Healthcare / Pharma leaked
    Ransomware saico.co.th id30031 View details Thailand Manufacturing / Engineering leaked
    Ransomware sanatoriodelta.com id30032 View details Colombia Healthcare / Pharma leaked
    Ransomware saude.mt.gov.br id30033 View details Brazil Public Sector leaked
    Ransomware sparkinter.com id30034 View details IT leaked
    Ransomware sra.nl id30035 View details Netherlands IT leaked
    Ransomware teleton.org.hn id30036 View details Honduras NGOs / Associations leaked
    Ransomware union-chemical.co.th id30037 View details Thailand leaked
    Ransomware venelectronics.com id30038 View details Venezuela, Bolivarian Republic of leaked
    Ransomware weinwurm.cc id30039 View details Austria leaked
    Ransomware nundungopee.mu id30040 View details Mauritius leaked
    Ransomware utb.edu.vn id30041 View details Viet Nam leaked
    Ransomware centralromana.com.do id29755 View details Dominican Republic Agriculture / Food leaked
    Ransomware shougang.com.pe id29756 View details Peru Manufacturing / Engineering leaked
    Ransomware stahlwille.nl id29757 View details Netherlands Manufacturing / Engineering leaked
    Ransomware lbreng.com.br id29758 View details Brazil Construction / Real Estate leaked
    Ransomware santoinacio-rio.com.br id29759 View details Brazil Hospitality / Food & Beverage / Tourism leaked
    Ransomware jec.co.id id29760 View details Indonesia Construction / Real Estate leaked
    Ransomware shottermill-jun.surrey.sch.uk id29761 View details United Kingdom Education leaked
    Ransomware columbiaorthogroup.com id29762 View details United States Healthcare / Pharma leaked
    Ransomware vth.nl id29763 View details Netherlands Education leaked
    Ransomware implosa.com id29764 View details Mexico Other leaked
    Ransomware groupe-mbm.com id29765 View details France Construction / Real Estate leaked
    Ransomware scbgroup.com.sg id29766 View details Singapore Finance / Legal / Insurance leaked
    Ransomware sumerfaktoring.com id29767 View details Russian Federation Finance / Legal / Insurance leaked
    Ransomware hgs-wt.at id29768 View details Austria Construction / Real Estate leaked
    Ransomware grupodetoni.com.br id29769 View details Brazil Construction / Real Estate leaked
    Ransomware hollandbulbfarms.com id29770 View details United States Agriculture / Food leaked
    Ransomware dobarro.com.uy id29771 View details Uruguay Retail / E-commerce leaked
    Ransomware helios.com.bo id29772 View details Bolivia, Plurinational State of Manufacturing / Engineering leaked
    Ransomware wessels.group id29773 View details Germany Manufacturing / Engineering leaked
    Ransomware sierravistahospital.com id29774 View details United States Healthcare / Pharma leaked
    Ransomware patta.com id29775 View details Netherlands Retail / E-commerce leaked
    Ransomware probat.com id29776 View details Germany Manufacturing / Engineering leaked
    Ransomware delano.k12.mn.us id29777 View details United States Education leaked
    Ransomware elumax.com id29778 View details Germany Manufacturing / Engineering
    Ransomware uni-china.com id29779 View details China Education leaked
    Ransomware sweetome.com id29780 View details Brazil Retail / E-commerce leaked
    Ransomware dentoncalvary.org id29114 View details United States Education
    Ransomware vp-brands.com id28994 View details Bulgaria Hospitality / Food & Beverage / Tourism
    Ransomware rjrgleanergroup.com id28936 View details United States Communication / Marketing
    Ransomware de.yangming.com id28937 View details Germany Transportation / Travel / Logistics leaked
    Ransomware anser-coding.com id28938 View details Germany Manufacturing / Engineering
    Ransomware rhactushotel.com id28939 View details Egypt Hospitality / Food & Beverage / Tourism
    Ransomware orekait.com id28373 View details Japan IT leaked
    Ransomware gursoygrup.com.tr id28374 View details Türkiye Construction / Real Estate
    Ransomware irestal.com id28375 View details Spain Manufacturing / Engineering leaked
    Ransomware ritta.co.th id28376 View details Thailand Construction / Real Estate leaked
    Ransomware defcon5italy.com id28481 View details Italy Manufacturing / Engineering leaked
    Ransomware planetsport.ma id28482 View details Morocco Retail / E-commerce
    Ransomware pricon.com.ph id28483 View details Philippines Manufacturing / Engineering
    Ransomware instapack.es id28484 View details Spain Transportation / Travel / Logistics
    Ransomware stllc.org id28485 View details United States Services
    Ransomware studiopiu.net id28617 View details Italy Communication / Marketing
    Ransomware murni.co.id id28618 View details Indonesia IT
    Ransomware bardehle.com id28619 View details Germany Finance / Legal / Insurance
    Ransomware erstransportes.com.br id28620 View details Brazil Transportation / Travel / Logistics
    Ransomware bladex.com id28621 View details Panama Finance / Legal / Insurance
    Ransomware heinrichs-logistic.de id28622 View details Germany Transportation / Travel / Logistics leaked
    Ransomware merlo.de id28623 View details Germany Manufacturing / Engineering
    Ransomware fastindustria.com.br id28178 View details Brazil Manufacturing / Engineering
    Ransomware sportvision.ba id28177 View details Bosnia and Herzegovina Retail / E-commerce leaked
    Ransomware townoforangeva.gov id28176 View details United States Public Sector
    Ransomware gas.mercedes-benz.com.eg id28175 View details Egypt Transportation / Travel / Logistics leaked
    Ransomware abuhatim.com id28174 View details Oman Construction / Real Estate
    Ransomware milanocavi.com id28173 View details Italy Manufacturing / Engineering leaked
    Ransomware zsfh.cz id28172 View details Czechia Education
    Ransomware contrar.it id28171 View details Italy Transportation / Travel / Logistics leaked
    Ransomware awvgrazerfeld.at id28170 View details Austria Public Sector
    Ransomware douglasstruckbodies.com id28169 View details United States Manufacturing / Engineering
    Ransomware mesto-jemnice.cz id28168 View details Czechia Public Sector leaked
    Ransomware meyzietp.com id28167 View details France Construction / Real Estate
    Ransomware pegasussrl.com id28166 View details Italy Manufacturing / Engineering
    Ransomware villa-romane.fr id28165 View details France Hospitality / Food & Beverage / Tourism
    Ransomware vitropor.pt id28164 View details Portugal Manufacturing / Engineering
    Ransomware vitexpharma.com id28163 View details Australia Healthcare / Pharma leaked
    Ransomware seleniaravenna.it id28162 View details Italy Transportation / Travel / Logistics
    Ransomware aplast.ro id28161 View details Romania Manufacturing / Engineering
    Ransomware shunhinggroup.com id28160 View details Hong Kong Retail / E-commerce
    Ransomware earthprotect.co.jp id28159 View details Japan Energy
    Ransomware wibeats.it id28158 View details Italy IT
    Ransomware comunidadandina.org id28157 View details Peru Public Sector
    Ransomware fondonorma.org.ve id28156 View details Venezuela, Bolivarian Republic of NGOs / Associations leaked
    Ransomware cegasa.com id28155 View details Spain Energy
    Ransomware nucleodediagnostico.mx id28154 View details Mexico Healthcare / Pharma
    Ransomware marti.do id28153 View details Dominican Republic Energy leaked
    Ransomware decaturdiagnosticlab.net id28152 View details United States Healthcare / Pharma
    Ransomware giunti.it id27707 View details Italy Education leaked
    Ransomware emp.id id27706 View details Indonesia IT