LockBit

Active

3,092 victims named on the leak site

7 in the last 30 days

308 in the last 12 months

Aug 2021 first victim we recorded

Aug 3, 2026 most recent victim posted

25 leak sites tracked

Data as of August 16, 2026.

Credential exposure before the attack

22.7% of LockBit victims whose domain we can identify (702 of 3,092) had employee credentials leak in the 12 months before LockBit named them as a victim.

We don't know whether any of these credentials were how LockBit gained initial access.

What industries LockBit targets

Sector identified for 1,364 of 3,092 victims.

Manufacturing	338
Healthcare	147
Financial Services	131
Construction	129
Education	128
Logistics	87
Legal	63
Government	56

Where the victims are located

Country identified for 1,321 of 3,092 victims.

Italy	107
Germany	101
France	95
United States	93
Brazil	81
United Kingdom	78
Australia	52
Mexico	51

Most recent LockBit victims

Victim	Sector	Country	Posted
SMS-SME sms-sme.com	Not identified	Not identified	Aug 3, 2026
Setic & Pourtier setic-pourtier.com	Manufacturing	France	Jul 28, 2026
Adventus adventusasia.com	Technology	Singapore	Jul 20, 2026
Briggs of Burton briggsplc.com	Healthcare	United Kingdom	Jul 20, 2026
Delkart Industries delkartindustries.com	Manufacturing	India	Jul 20, 2026
Micropack micropack.com.ar	Not identified	Argentina	Jul 20, 2026
Pioneer Coldstore and Cladding pcclimitedindia.com	Manufacturing	India	Jul 20, 2026
Sirsa sirsa.it	Manufacturing	Italy	Jul 14, 2026
Media Service Maastricht mediaservicemaastricht.nl	Technology	Netherlands	Jul 13, 2026
A. Bianchini Ingeniero abianchini.es	Manufacturing	Spain	Jul 2, 2026
Hotel de la Bourse hotel-bourse.com	Hospitality	France	Jul 2, 2026
JS Hotels jshotels.com	Hospitality	Spain	Jul 2, 2026
ComTRI comtri.de	Technology	Germany	Jul 1, 2026
Gies Dienstleistungen giesdl.de	Not identified	Germany	Jul 1, 2026
Bancroft Engineering bancrofteng.com	Construction	United States	Jun 22, 2026
Magna Motors Dominicana magna.com.do	Automotive	Not identified	Jun 22, 2026
Ravagnan ravagnan.com	Manufacturing	Italy	Jun 22, 2026
Tay Bac University utb.edu.vn	Education	Vietnam	Jun 22, 2026
Botswana Vaccine Institute bvi.co.bw	Manufacturing	Not identified	Jun 19, 2026
Como Furniture Enterprises comta.com.tw	Manufacturing	Taiwan	Jun 19, 2026

Showing the 20 most recent of 3,092. Browse recent data breaches for more.

LockBit leak sites

Addresses we've seen LockBit publish victims from. Any .onion address needs the Tor Browser.

lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion
lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion
lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion
lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion
lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion
lbbov7weoojwnqytnjqygmglkwtim5dvyw3xvoluk5ostz75ofd6enqd.onion
lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion
lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion
lbbp2rsfcmg5durpwgs22wxrdngsa4wiwmc4xk6hgmuluy6bvbvvtlid.onion
lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion
lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion
lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion.ly
mega.nz
tox.chat
lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion
lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
lockbit2zfxali5yrplh5swimxva5o4xqi3zpbc24tczgffxh7msrvyd.onion
lockbit3m6lgexvokfxyqcdnykdvhye7aftic6p4uh7mnz42h25ooiid.onion
lockbit7gtvdkx7j3tyfpw43zv6majh2owrsp3zilhpm36a3fldqtyqd.onion
lockbitjvv72zmzgcqgn63ehjaapffubbwjwi32gzdbrahxjy3hzrxid.onion
lockbitnthkolp2mfa5byjrx2mcbleruktoiawsprqrducnrzilchjid.onion

LockBit questions

Is LockBit still active?

Yes. LockBit posted its most recent victim on August 3, 2026. That's 7 victims in the last 30 days.

How many victims has LockBit claimed?

LockBit has named 3,092 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 308 of them were posted in the last 12 months.

When did LockBit first appear?

The first victim we recorded for LockBit was posted on August 14, 2021. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does LockBit target?

Manufacturing accounts for the most victims we can classify, with 338. Healthcare follows at 147. We could identify a sector for 1,364 of 3,092 victims, so treat this as the shape of the targeting rather than a full census.

Has LockBit already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.