LockBit

Active

Also tracked as Lockbit3

3,127 victims named on the leak site

31 in the last 30 days

338 in the last 12 months

Aug 2021 first victim we recorded

Sep 15, 2026 most recent victim posted

25 leak sites tracked

Data as of September 15, 2026.

Credential exposure before the attack

22.6% of LockBit victims whose domain we can identify (707 of 3,127) had employee credentials leak in the 12 months before LockBit named them as a victim.

We don't know whether any of these credentials were how LockBit gained initial access.

What industries LockBit targets

Sector identified for 1,391 of 3,127 victims.

Manufacturing	343
Healthcare	150
Financial Services	137
Construction	132
Education	129
Logistics	88
Legal	67
Government	58

Where the victims are located

Country identified for 1,353 of 3,127 victims.

Italy	109
Germany	103
United States	102
France	96
Brazil	83
United Kingdom	79
Australia	52
Mexico	51

Most recent LockBit victims

Victim	Sector	Country	Posted
Comune di Robecco sul Naviglio robeccosulnaviglio.mi.it	Government	Italy	Sep 15, 2026
Tilitoimisto HTT Oy httoy.fi	Financial Services	Finland	Sep 15, 2026
TPI Bearings tpi.tw	Manufacturing	Taiwan	Sep 15, 2026
Alpha Omega Engineering alphaomega-eng.com	Healthcare	Israel	Sep 11, 2026
AmorSaúde amorsaude.com.br	Healthcare	Brazil	Sep 10, 2026
Contreras Hermanos contreras.com.ar	Construction	Argentina	Sep 9, 2026
FDC Putman fdcputman.nl	Financial Services	Netherlands	Sep 9, 2026
VSB Attorneys vsbattorneys.co.za	Legal	South Africa	Sep 8, 2026
Huisartsencentrum Klein Ittersum huisartsencentrumkleiniterson.nl	Healthcare	Netherlands	Sep 7, 2026
Kala Health kalahealth.eu	Manufacturing	Netherlands	Sep 7, 2026
PSC Industries pscindustries.com	Manufacturing	United States	Sep 7, 2026
All Steel Products allsteelproducts.nl	Not identified	Netherlands	Sep 1, 2026
Bartels B.V. Gevels & Daken bartelsbv.nl	Construction	Netherlands	Sep 1, 2026
Bethel Korean Church bkc.org	Not identified	United States	Sep 1, 2026
Beaumont Tashjian hoaattorneys.com	Legal	United States	Sep 1, 2026
Susquehanna Valley Federal Credit Union svfcu.org	Financial Services	United States	Sep 1, 2026
Van Kessel & Janssen vkj.nl	Construction	Netherlands	Sep 1, 2026
American Plan Administrators apatpa.com	Financial Services	United States	Aug 31, 2026
DeCe Computers dece.cz	Technology	Czech Republic	Aug 28, 2026
FP Management fpmanagement.nl	Not identified	Netherlands	Aug 28, 2026

Showing the 20 most recent of 3,127. Browse recent data breaches for more.

LockBit leak sites

Addresses we've seen LockBit publish victims from. Any .onion address needs the Tor Browser.

lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion
lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion
lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion
lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion
lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion
lbbov7weoojwnqytnjqygmglkwtim5dvyw3xvoluk5ostz75ofd6enqd.onion
lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion
lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion
lbbp2rsfcmg5durpwgs22wxrdngsa4wiwmc4xk6hgmuluy6bvbvvtlid.onion
lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion
lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion
lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion
lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion.ly
tox.chat
mega.nz
lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion
lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion
lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion
lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion
lockbit2zfxali5yrplh5swimxva5o4xqi3zpbc24tczgffxh7msrvyd.onion
lockbit3m6lgexvokfxyqcdnykdvhye7aftic6p4uh7mnz42h25ooiid.onion
lockbit7gtvdkx7j3tyfpw43zv6majh2owrsp3zilhpm36a3fldqtyqd.onion
lockbitjvv72zmzgcqgn63ehjaapffubbwjwi32gzdbrahxjy3hzrxid.onion
lockbitnthkolp2mfa5byjrx2mcbleruktoiawsprqrducnrzilchjid.onion

LockBit questions

Is LockBit still active?

Yes. LockBit posted its most recent victim on September 15, 2026. That's 31 victims in the last 30 days.

How many victims has LockBit claimed?

LockBit has named 3,127 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 338 of them were posted in the last 12 months.

When did LockBit first appear?

The first victim we recorded for LockBit was posted on August 14, 2021. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does LockBit target?

Manufacturing accounts for the most victims we can classify, with 343. Healthcare follows at 150. We could identify a sector for 1,391 of 3,127 victims, so treat this as the shape of the targeting rather than a full census.

Has LockBit already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.