LockBit

Active

Also tracked as Lockbit3

3,136 victims named on the leak site

26 in the last 30 days

347 in the last 12 months

Aug 2021 first victim we recorded

Oct 1, 2026 most recent victim posted

25 leak sites tracked

Data as of October 1, 2026.

Credential exposure before the attack

22.7% of LockBit victims whose domain we can identify (711 of 3,136) had employee credentials leak in the 12 months before LockBit named them as a victim.

We don't know whether any of these credentials were how LockBit gained initial access.

What industries LockBit targets

Sector identified for 1,400 of 3,136 victims.

Manufacturing	345
Healthcare	151
Financial Services	139
Construction	132
Education	129
Logistics	89
Legal	68
Government	58

Where the victims are located

Country identified for 1,362 of 3,136 victims.

Italy	110
United States	103
Germany	103
France	96
Brazil	85
United Kingdom	79
Australia	52
Mexico	51

Most recent LockBit victims

Victim	Sector	Country	Posted
Consilio consilio.com	Legal	United States	Oct 1, 2026
SPG spg.co.kr	Manufacturing	South Korea	Sep 30, 2026
Camorim Serviços Marítimos camorim.com.br	Logistics	Brazil	Sep 29, 2026
CORIS CENTRO RICAMBI corisricambi.it	Automotive	Italy	Sep 25, 2026
Anery Home Care anery.com.br	Healthcare	Brazil	Sep 24, 2026
Taspen Life taspenlife.com	Financial Services	Indonesia	Sep 23, 2026
Forus forus.cl	Retail	Chile	Sep 21, 2026
Siinqee Bank siinqeebank.com	Financial Services	Not identified	Sep 21, 2026
HyGear hygear.com	Manufacturing	Netherlands	Sep 18, 2026
Comune di Robecco sul Naviglio robeccosulnaviglio.mi.it	Government	Italy	Sep 15, 2026
Tilitoimisto HTT Oy httoy.fi	Financial Services	Finland	Sep 15, 2026
TPI Bearings tpi.tw	Manufacturing	Taiwan	Sep 15, 2026
Alpha Omega Engineering alphaomega-eng.com	Healthcare	Israel	Sep 11, 2026
AmorSaúde amorsaude.com.br	Healthcare	Brazil	Sep 10, 2026
Contreras Hermanos contreras.com.ar	Construction	Argentina	Sep 9, 2026
FDC Putman fdcputman.nl	Financial Services	Netherlands	Sep 9, 2026
VSB Attorneys vsbattorneys.co.za	Legal	South Africa	Sep 8, 2026
Huisartsencentrum Klein Ittersum huisartsencentrumkleiniterson.nl	Healthcare	Netherlands	Sep 7, 2026
Kala Health kalahealth.eu	Manufacturing	Netherlands	Sep 7, 2026
PSC Industries pscindustries.com	Manufacturing	United States	Sep 7, 2026

Showing the 20 most recent of 3,136. Browse recent data breaches for more.

LockBit leak sites

Addresses we've seen LockBit publish victims from. Any .onion address needs the Tor Browser.

lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion
lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion
lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion
lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion
lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion
lbbov7weoojwnqytnjqygmglkwtim5dvyw3xvoluk5ostz75ofd6enqd.onion
lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion
lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion
lbbp2rsfcmg5durpwgs22wxrdngsa4wiwmc4xk6hgmuluy6bvbvvtlid.onion
lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion
lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion
lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion.ly
tox.chat
mega.nz
lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion
lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
lockbit2zfxali5yrplh5swimxva5o4xqi3zpbc24tczgffxh7msrvyd.onion
lockbit3m6lgexvokfxyqcdnykdvhye7aftic6p4uh7mnz42h25ooiid.onion
lockbit7gtvdkx7j3tyfpw43zv6majh2owrsp3zilhpm36a3fldqtyqd.onion
lockbitjvv72zmzgcqgn63ehjaapffubbwjwi32gzdbrahxjy3hzrxid.onion
lockbitnthkolp2mfa5byjrx2mcbleruktoiawsprqrducnrzilchjid.onion

LockBit questions

Is LockBit still active?

Yes. LockBit posted its most recent victim on October 1, 2026. That's 26 victims in the last 30 days.

How many victims has LockBit claimed?

LockBit has named 3,136 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 347 of them were posted in the last 12 months.

When did LockBit first appear?

The first victim we recorded for LockBit was posted on August 14, 2021. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does LockBit target?

Manufacturing accounts for the most victims we can classify, with 345. Healthcare follows at 151. We could identify a sector for 1,400 of 3,136 victims, so treat this as the shape of the targeting rather than a full census.

Has LockBit already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.