LV
Data as of September 14, 2026.
Credential exposure before the attack
41.4% of LV victims whose domain we can identify (41 of 99) had employee credentials leak in the 12 months before LV named them as a victim.
We don't know whether any of these credentials were how LV gained initial access.
What industries LV targets
Sector identified for 18 of 99 victims.
| Manufacturing | 8 | |
| Financial Services | 2 | |
| Construction | 2 | |
| Real Estate | 1 | |
| Hospitality | 1 | |
| Logistics | 1 | |
| Healthcare | 1 | |
| Legal | 1 |
Where the victims are located
Country identified for 41 of 99 victims.
| France | 6 | |
| Australia | 6 | |
| Japan | 4 | |
| Brazil | 4 | |
| Malaysia | 3 | |
| Mexico | 2 | |
| Finland | 2 | |
| United Kingdom | 2 |
Most recent LV victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| stibbsco.com | Legal | Not identified | Nov 29, 2022 |
| visiontechnologies.com | Technology | Not identified | Nov 29, 2022 |
| glendimplex.com | Manufacturing | Not identified | Nov 28, 2022 |
| grpdfond.com | Not identified | Not identified | Nov 28, 2022 |
| unitedauto.mx | Not identified | Mexico | Nov 21, 2022 |
| thewassociates.com | Not identified | Not identified | Nov 16, 2022 |
| brazilianpetfoods.com.br | Not identified | Brazil | Nov 14, 2022 |
| billsbills.com | Not identified | Not identified | Nov 9, 2022 |
| consumax.com.ar | Financial Services | Argentina | Nov 3, 2022 |
| awesomekidsdental.com | Healthcare | Not identified | Nov 2, 2022 |
| cblsys.co.uk | Not identified | United Kingdom | Nov 2, 2022 |
| gruposifu.com | Not identified | Not identified | Nov 2, 2022 |
| kinetic.ph | Not identified | Philippines | Nov 2, 2022 |
| paramount-land.com | Not identified | Not identified | Nov 2, 2022 |
| rougier.fr | Not identified | France | Nov 2, 2022 |
| sicotec.ch | Not identified | Switzerland | Nov 2, 2022 |
| st-ji.com | Manufacturing | Not identified | Nov 2, 2022 |
| subcarnechevarria.com | Manufacturing | Not identified | Nov 2, 2022 |
| thehurstgroup.co.uk | Not identified | United Kingdom | Nov 2, 2022 |
| wickershamconstruction.com | Construction | Not identified | Nov 2, 2022 |
Showing the 20 most recent of 99. Browse recent data breaches for more.
LV leak sites
Addresses we've seen LV publish victims from. Any .onion address needs the Tor Browser.
rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.oniondquf4y4bdexjzdi42vbyyl56hp4u54p7gbvmw4kqvcvqzmq5vpaq7vid.onionlno6zx3doe3nki3txgoo7ocsm37vdg46lshqmgqhn5swqgsxuz2fo4id.onionnddzpcc6yh3z3zkdvd7y5ycjasgiwd33hpqlutl65vwe3zjdai2j6xyd.onion3gtlnuzgyeondzqptzndtpnp3fczacziga3njyzy52bm76kyuw2oxyad.onion4aenqyz7gnhjokk3rmjrjl7epudaqbxqzno5np57dfo6bbqlkq7uh5ad.onionenvecpivgmvjpiu7wspm7yrmgumoj5esu5q2rjp6a5dlq2mjwhoxq3id.onionpiwr2fyfximgezlu6todjhess4zn637crn7j64tlmsljs5tawhopniyd.onionalphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion
LV questions
Is LV still active?
Not for over a year. The last victim we recorded was November 29, 2022. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has LV claimed?
LV has named 99 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did LV first appear?
The first victim we recorded for LV was posted on March 24, 2021. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does LV target?
Manufacturing accounts for the most victims we can classify, with 8. Financial Services follows at 2. We could identify a sector for 18 of 99 victims, so treat this as the shape of the targeting rather than a full census.
Has LV already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.