Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

LOCKBIT · Threat actor profile

// THREAT ACTOR

LOCKBIT_

Dormant

LockBit is one of the longest-running and most prolific ransomware-as-a-service operations in the world, originally launched in 2019. The brand has gone through several iterations — LockBit 2.0, LockBit 3.0 ("Black"), and a relaunched LockBit 5.0 — and recruits affiliates who deploy its file-encrypting malware against hospitals, manufacturers, governments, and Fortune 500 enterprises in exchange for a cut of the ransom. International law-enforcement disrupted core LockBit infrastructure during 2024’s Operation Cronos, but successor branding has continued to claim victims.

For Ransomnews editorial coverage of LOCKBIT — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

0 Victims tracked
0 / 2 Active mirrors
— First listing
— Most recent

Leak site mirrors

2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • lockbitkodidilol.onion
  • lockbitks2tvnmwk.onion snapshot · 2024-12-12 12:09

// CONFIRMED ATTACKS

LockBit confirmed attacks: 539 verified incidents

Ransomnews has verified 539 LockBit incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from February 2020 to June 2026. United States accounts for 235 of them (44%), with victims recorded in 60 countries in total. The most affected sector is government, at 91 confirmed victims. A ransom payment was publicly confirmed in 10 cases and publicly refused in 104; the outcome is unrecorded in the remaining 425. Where a figure was disclosed (167 cases), these incidents account for 29,098,434 exposed records.

539Verified incidents
60Countries
2020–2026Active range
9%Paid, where outcome known

Confirmed victims by year

  • 20209
  • 202149
  • 2022110
  • 2023231
  • 202498
  • 202513
  • 202629

Most affected sectors

  • Government91
  • Manufacturing75
  • Healthcare71
  • Education57
  • Finance42
  • Other32
  • Technology31
  • Retail30

Most affected countries

  • United States235
  • France48
  • Japan25
  • Italy23
  • United Kingdom23
  • Canada15
  • Germany14
  • Spain12

Verified LockBit incidents (100 most recent of 539)

DateOrganisationSector LocationRecordsRansom paidSource
June 2026 Hanover Police Department Government Massachusetts, United States — Unknown Source
May 2026 Grey High School Education Gqeberha, South Africa — Unknown Source
May 2026 Delano Public Schools Education Minnesota, United States — No Source
May 2026 RJRGLEANER Communications Group. Other Kingston, Jamaica — Unknown Source
April 2026 Decatur Diagnostic Lab Healthcare Alabama, United States 500 Unknown Source
April 2026 Merlo Deutschland GmbH Retail Bremen, Germany — Unknown Source
April 2026 SRA Finance De Meern, Netherlands — Unknown Source
April 2026 Abwasserverband Grazerfeld Utilities Wildon, Austria — Unknown Source
April 2026 Shun Hing Systems Integration Co., Ltd. Manufacturing Hong Kong, Hong Kong 921,000 Unknown Source
April 2026 Pricon Microelectronics, Inc. Manufacturing Cabuyao, Philippines — Unknown Source
March 2026 Nandrin Government Nandrin, Belgium — Unknown Source
March 2026 Grad Rovinj - Città di Rovigno Government Rovinj-Rovigno, Croatia — Unknown Source
March 2026 PT. DaikyoNishikawa Tenma Indonesia Manufacturing Karawang, Indonesia — Unknown Source
March 2026 Secretaria de Estado de Saúde de Mato Grosso Government Cuiabá, Brazil — No Source
March 2026 Consorzio Selenia soc. coop. Healthcare Ravenna, Italy — Unknown Source
March 2026 Městský úřad Jemnice Government Jemnici, Czechia — No Source
March 2026 Jean Co., Ltd. Manufacturing Taipei, Taiwan — Unknown Source
March 2026 Alcorn School District Education Mississippi, United States — Unknown Source
February 2026 Pediatric Products, LLC (Xpress Nebs) Healthcare Ohio, United States 10,211 Unknown Source
February 2026 Landsteiner Elektrotechnik GmbH Service Klaus, Austria — Unknown Source
February 2026 Aeromedical Society of Australasia Other Georges Hall, Australia — Unknown Source
January 2026 US Duct Inc. Manufacturing North Carolina, United States — Unknown Source
January 2026 Elmwood Healthcare Healthcare Rhode Island, United States — Unknown Source
January 2026 MAX USA CORP Manufacturing New York, United States — Unknown Source
January 2026 Sociedad Hipotecaria Federal Government Mexico City, Mexico — Unknown Source
January 2026 Tombow Beverage Co. Ltd. Food and Beverage Toyama, Japan — Unknown Source
January 2026 Nagoya Port Authority Government Nagoya, Japan — Unknown Source
January 2026 Veenkoloniaal Museum Other Veendam, Netherlands — No Source
January 2026 Mt. Spokane Pediatrics Healthcare Washington, United States 32,021 Unknown Source
November 2025 PT Clipan Finance Indonesia Tbk Finance West Jakarta, Indonesia — Unknown Source
November 2025 Milano Ristorazione S.p.A. Food and Beverage Milan, Italy — Unknown Source
October 2025 First Rate Financial Finance Alaska, United States 1,224 Unknown Source
October 2025 Clarinda Regional Health Center Healthcare Iowa, United States 24,341 Unknown Source
August 2025 Insight Hospital & Medical Center Healthcare Illinois, United States — Unknown Source
April 2025 PDCM Insurance Finance Iowa, United States 4,734 Unknown Source
March 2025 Hennessy Advisors, Inc. Finance California, United States 12,643 Unknown Source
March 2025 AC Investment Management, LLC Finance New York, United States — Unknown Source
March 2025 Graphique de France Manufacturing Massachusetts, United States 339 Unknown Source
March 2025 Crystal D Manufacturing Minnesota, United States — Unknown Source
January 2025 OYO Hotel & Casinos Las Vegas Other Nevada, United States 4,742 Unknown Source
January 2025 AB Capital Group Finance Taguig, Philippines — Unknown Source
January 2025 Topackt IT Solutions GmbH Technology Speyer, Germany — Unknown Source
December 2024 Sayanmoloko Food and Beverage Sayanogorsk, Russia — Unknown Source
October 2024 Allegheny Health Network (AHN) Healthcare Pennsylvania, United States 292,773 Unknown Source
September 2024 TPG Aged Care Healthcare Kinglsey, Australia — Unknown Source
August 2024 College Hospital Costa Mesa Healthcare California, United States 591 Unknown Source
August 2024 Real Hospital Português de Beneficência em Pernambuco Healthcare Recife, Brazil — Unknown Source
July 2024 Nishio Holdings Co., Ltd. Service Tokyo, Japan — Unknown Source
July 2024 CUSAEM (Policía Auxiliar del Estado de México) Government Tlalnepantla de Baz, Mexico — Unknown Source
July 2024 Competenz Education Newmarket, New Zealand — Unknown Source
July 2024 Education for the 21st Century Education Chislehurst, United Kingdom — Unknown Source
July 2024 Région Pays de la Loire Government Nantes, France — Unknown Source
July 2024 Clay County Government Indiana, United States — Unknown Source
June 2024 Fairfield Memorial Hospital Association Healthcare Illinois, United States 25,093 Unknown Source
June 2024 Wattle Range Council Government Millicent, Australia — No Source
June 2024 Westfälische Stahlgesellschaft Manufacturing Plettenberg, Germany — Unknown Source
June 2024 University Hospital Centre Zagreb (KBC Zagreb) Healthcare Zagreb, Croatia — No Source
June 2024 Toronto District School Board (TDSB) Education Toronto, Canada — Unknown Source
May 2024 Divaris Consolidated Investments, Inc. (Divaris Real Estate) Service Virginia, United States 2,278 Unknown Source
May 2024 YMCA of Central Florida Other Florida, United States 11,954 Unknown Source
May 2024 Ora, LLC Healthcare Massachusetts, United States 77 Unknown Source
May 2024 Schmitty & Sons Transportation Minnesota, United States 3,985 Unknown Source
May 2024 Joliet Public Schools District 86 Education Illinois, United States 1,495 Unknown Source
May 2024 Daubert Chemical Company, Inc. Manufacturing Illinois, United States 442 Unknown Source
May 2024 MGOPS w Sędziszów Małopolski Government Sędziszów Małopolski, Poland — Unknown Source
May 2024 Hesperia Unified School District Education California, United States — Unknown Source
May 2024 Mālama I Ke Ola Health Center (Community Clinic of Maui, Inc.) Healthcare Hawaii, United States 123,882 Unknown Source
May 2024 Kulicke and Soffa Industries, Inc. Manufacturing Singapore, Singapore 1,105 Unknown Source
May 2024 Brockington College Education Enderby, United Kingdom — Unknown Source
May 2024 Smith & Caugheys Retail Auckland, New Zealand — Unknown Source
May 2024 V-Star Creations Private Limited Retail Kerala, India — Unknown Source
May 2024 Università degli Studi di Siena Education Siena, Italy — Unknown Source
May 2024 Ewing Marion Kauffman School Education Missouri, United States — Unknown Source
May 2024 Township of Union Public Schools Education New Jersey, United States — Unknown Source
May 2024 City of Wichita Government Kansas, United States — Unknown Source
May 2024 Istituto San Giovanni Bosco e Cennino Cennini Education Colle di Val d'Elsa SI, Italy — Unknown Source
May 2024 Evolve Bank & Trust Finance Arkansas, United States 7,640,112 No Source
April 2024 Allied Telesis, Inc. Technology California, United States 3,413 Unknown Source
April 2024 Thede Culpepper Moore Munro & Silliman LLP Legal Oregon, United States 437 Unknown Source
April 2024 Power Test, LLC Manufacturing Wisconsin, United States 2,083 Unknown Source
April 2024 Legacy Professionals, LLP Finance Illinois, United States 216,752 Unknown Source
April 2024 Endless Co., Ltd. Manufacturing Tokyo, Japan — Unknown Source
April 2024 Equinox, Inc. Healthcare New York, United States 21,565 Unknown Source
April 2024 Price Modern Manufacturing Maryland, United States — Unknown Source
April 2024 Keuka College Education New York, United States — Unknown Source
April 2024 Allcare Medical Management, Inc. Healthcare California, United States 16,378 Unknown Source
April 2024 Secure Energy Solutions, LLC Utilities Massachusetts, United States 354 Unknown Source
April 2024 Pueblo County School District 70 Education Colorado, United States — Unknown Source
April 2024 London Drugs Retail Richmond, Canada — No Source
April 2024 KJF Augsburg Healthcare Bavaria, Germany — Unknown Source
April 2024 Centre Hospitalier de Cannes – Simone Veil Healthcare Cannes, France — No Source
April 2024 Skanlog Transportation Glostrup, Norway — Unknown Source
April 2024 Ville de Saint-Nazaire et Saint-Nazaire Agglomération Government Saint-Nazaire, France — No Source
April 2024 Union Hospital Healthcare Tai Wai, Hong Kong — No Source
April 2024 Oracle CMS Service Melbourne, Australia — Unknown Source
March 2024 OYAK Savunma ve Güvenlik Sistemleri A.Ş. Service Ankara, Turkey — Unknown Source
March 2024 Redwood Coast Regional Center Healthcare California, United States 24,937 Unknown Source
March 2024 Lavelle Industries, Inc. Manufacturing Wisconsin, United States 9,156 Unknown Source
March 2024 Call 4 Health, Inc. Healthcare Florida, United States 10,434 Unknown Source
March 2024 Slovenska narodna kniznica (Slovakia National Library) Government Martin, Slovakia — Unknown Source

Ransomnews coverage of LockBit

  • LockBit 5.0: the comeback nobody wanted
  • LockBit, 2 years after Operation Cronos: where are they now?
  • RansomHub explained: the post-LockBit consolidator
  • LockBit: The Ransomware Brand That Redefined the Industry — and Got Taken Down

Claimed vs confirmed. The figures above the fold on this page come from LockBit's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design — most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

// The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

// Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

// Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,459 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.