Skip to content
Leak site of lockbit5, captured by ThreatCluster

lockbit5

Active

25 tracked victims · First seen Apr 17, 2023 · Last seen Oct 16, 2026

About

Written by ThreatCluster from 4 stories

lockbit5 is a ransomware group that conducts campaigns against organizations using an extortion-style approach and notable tradecraft such as publicly listing victims on the Ransomware.Live platform to pressure payments. Victims total 339, with the sectors most affected described as Manufacturing, Technology, Healthcare, Education, and Business Services, and the countries most affected listed as the United States, Brazil, Italy, Germany, and Mexico. A common pattern across the reporting is cross-sector and cross-country activity with public victim disclosure tied to campaigns. For illustration, on September 14, 2026, LockBit 5.0 was named among groups reporting victims in a wave of ransomware attacks and published new victims on the Ransomware.Live platform.

Sectors: Manufacturing, Technology, Healthcare · Countries: US, BR, IT

Recent victims

View all →
VictimSectorCountryPostedStatus
ock.com.myNot FoundMYOct 16, 2026listed
torcivialaw.comProfessional ServicesITOct 15, 2026listed
kidzrkooldental.comHealthcareUSOct 15, 2026
lcww.com.egNot FoundEGOct 15, 2026
neweramachines.comManufacturingUSOct 15, 2026
grupoabg.comManufacturingMXOct 15, 2026
poolegroup.com.auAccountingAUOct 10, 2026
saintpierredescorps.frOtherFROct 14, 2026listed
skycc.co.thOtherTHOct 13, 2026
kordhotels.grHospitalityGROct 13, 2026
consilio.comProfessional ServicesUSSep 30, 2026
capitalbankhaiti.bizFinancial ServicesHTApr 10, 2026
grunenwald.comOtherDEOct 6, 2026
avsa.com.arOtherAROct 8, 2026
spg.co.krOtherKRSep 29, 2026listed
camorim.com.brRetail & E-CommerceBRSep 28, 2026
taspenlife.comHealthcareKZSep 25, 2026
anery.com.brAgriculture and Food ProductionBRSep 25, 2026
corisricambi.itOtherITSep 25, 2026
siinqeebank.comFinancial ServicesSOSep 20, 2026
hygear.comHealthcareDESep 16, 2026listed
forus.clApparelChileSep 18, 2026
tpi.twTechnologyTWSep 14, 2026
comune.robeccosulnaviglio.mi.itGovernment & DefenseITSep 14, 2026
httoy.fiAccountingFinlandSep 14, 2026

Found by ThreatCluster

162 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

OCK Group Berhad
ock.com.my
Oct 18, 2026
Luxor Drinking Water and Sanitation Company
lcww.com.eg
Oct 18, 2026
SKY CC Company Limited
skycc.co.th
Oct 15, 2026
Poole Group
poolegroup.com.au
Oct 15, 2026
Argentina Valores S.A.
avsa.com.ar · financial services
Oct 15, 2026
GRUNENWALD
grunenwald.com
Oct 15, 2026
Saint-Pierre-des-Corps
saintpierredescorps.fr
Oct 15, 2026
Karix
karix.com
Oct 15, 2026
Grupo ABG
grupoabg.com
Oct 15, 2026
New Era Machines
neweramachines.com
Oct 15, 2026
LCWW
lcww.com.eg
Oct 15, 2026
Kidz R Kool Pediatric Dentistry
kidzrkooldental.com
Oct 15, 2026
Torcivia, Donlon, Goddeau & Rubin, P.A.
torcivialaw.com
Oct 15, 2026
Kord Hotels
kordhotels.gr
Oct 15, 2026
Capital Bank SA
capitalbankhaiti.biz
Oct 15, 2026
Consilio
consilio.com
Oct 15, 2026
SPG Co., Ltd
spg.co.kr
Oct 15, 2026
Camorim Serviços Marítimos
camorim.com.br
Oct 15, 2026
CO.R.I.S. S.r.l.
corisricambi.it
Oct 15, 2026
Anery Home Care
anery.com.br
Oct 15, 2026

All ransomware groups · Dark web intelligence