Ransomware Group intelligence
Lockbit3
InactiveTrack Lockbit3 with 2022 published victims and 42 known leak locations in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Lockbit3 is tracked by Dark Eye as a ransomware group with 2022 published victims.
United States is currently the most targeted country in this dataset.
42 known leak locations are currently associated with this group.
Leak Status Distribution
31
- Leaked 14 45.2%
- Pending 17 54.8%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (42)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 42 | Onion service | Up checked 2h ago | lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion |
| Leak location 27 | Onion service | Up checked 2h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 29 | Onion service | Up checked 2h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 39 | Onion service | Up checked 2h ago | lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion |
| Leak location 41 | Onion service | Down checked 2h ago | lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43foocwmrzsokumqid.onion |
| Leak location 40 | Onion service | Down checked 2h ago | lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion |
| Leak location 37 | Onion service | Down checked 2h ago | lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion |
| Leak location 35 | Onion service | Down checked 2h ago | lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion |
| Leak location 38 | Onion service | Down checked 2h ago | lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion |
| Leak location 36 | Onion service | Down checked 2h ago | lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion |
| Leak location 34 | Onion service | Down checked 2h ago | lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion |
| Leak location 33 | Onion service | Down checked 2h ago | lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion |
| Leak location 31 | Onion service | Down checked 2h ago | lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion |
| Leak location 32 | Onion service | Down checked 2h ago | lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion |
| Leak location 30 | Onion service | Down checked 2h ago | lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion |
| Leak location 28 | Onion service | Down checked 2h ago | ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion |
| Leak location 25 | Onion service | Down checked 2h ago | lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion |
| Leak location 24 | Onion service | Down checked 2h ago | lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion |
| Leak location 26 | Onion service | Down checked 2h ago | lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion |
| Leak location 23 | Onion service | Down checked 2h ago | lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion |
| Leak location 21 | Onion service | Down checked 2h ago | lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion |
| Leak location 22 | Onion service | Down checked 2h ago | lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion |
| Leak location 20 | Onion service | Down checked 2h ago | lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion |
| Leak location 19 | Onion service | Down checked 2h ago | lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion |
| Leak location 17 | Onion service | Down checked 2h ago | lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion |
| Leak location 18 | Onion service | Down checked 2h ago | lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion |
| Leak location 16 | Onion service | Down checked 2h ago | lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion |
| Leak location 14 | Onion service | Down checked 2h ago | lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion |
| Leak location 15 | Onion service | Down checked 2h ago | lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion |
| Leak location 12 | Onion service | Down checked 2h ago | lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion |
| Leak location 11 | Onion service | Down checked 2h ago | lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion |
| Leak location 13 | Onion service | Down checked 2h ago | lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion |
| Leak location 8 | Onion service | Down checked 2h ago | lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion |
| Leak location 7 | Onion service | Down checked 2h ago | lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion |
| Leak location 9 | Onion service | Down checked 2h ago | lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion |
| Leak location 6 | Onion service | Down checked 2h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 10 | Onion service | Down checked 2h ago | lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion |
| Leak location 5 | Onion service | Down checked 2h ago | lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion |
| Leak location 4 | Onion service | Down checked 2h ago | lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion |
| Leak location 3 | Onion service | Down checked 2h ago | lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion |
| Leak location 2 | Onion service | Down checked 2h ago | lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion |
| Leak location 1 | Onion service | Down checked 2h ago | lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion |
Top Activity Sectors (17)
- Not identified 462
- Communication / Marketing 418
- Services 158
- Manufacturing / Engineering 144
- Finance / Legal / Insurance 141
- Healthcare / Pharma 108
- Education 92
- Construction / Real Estate 76
- IT 73
- Energy 69
- Public Sector 65
- Retail / E-commerce 57
- Transportation / Travel / Logistics 52
- Hospitality / Food & Beverage / Tourism 35
- Agriculture / Food 31
- Telecommunications 24
- NGOs / Associations 13
Typical Attacks (34)
▼How Lockbit3 typically operates, as attributed by MITRE ATT&CK v19.2. Attributed via LockBit 3.0.
-
What they do: LockBit 3.0 can use a compromised local account for lateral movement.
What that means: Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1059.001 PowerShell Execution
What they do: LockBit 3.0 can use PowerShell to apply Group Policy changes.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: LockBit 3.0 has the ability to directly call native Windows API items during execution.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
T1569.002 Service Execution Execution
What they do: LockBit 3.0 can use PsExec to execute commands and payloads.
What that means: Adversaries may abuse the Windows service control manager to execute malicious commands or payloads.
-
What they do: LockBit 3.0 can change the Registry values for Group Policy refresh time, to disable SmartScreen, and to disable Windows Defender.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
What they do: LockBit 3.0 can install system services for persistence.
What that means: Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence.
-
What they do: LockBit 3.0 can enable automatic logon through the `SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon` Registry key.
What that means: Adversaries may abuse features of Winlogon to execute DLLs and/or executables when a user logs in.
-
What they do: LockBit 3.0 can enable options for propogation through Group Policy Objects.
What that means: Adversaries may modify Group Policy Objects (GPOs) to subvert the intended discretionary access controls for a domain, usually with the intention of escalating privileges on the domain.
-
T1548.002 Bypass User Account Control Privilege Escalation
What they do: LockBit 3.0 can bypass UAC to execute code with elevated privileges through an elevated Component Object Model (COM) interface.
What that means: Adversaries may bypass UAC mechanisms to elevate process privileges on system.
-
T1027.002 Software Packing Stealth
What they do: LockBit 3.0 can use code packing to hinder analysis.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1027.013 Encrypted/Encoded File Stealth
What they do: The LockBit 3.0 payload includes an encrypted main component.
What that means: Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.
-
T1070.004 File Deletion Stealth
What they do: LockBit 3.0 can delete itself from disk.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1140 Deobfuscate/Decode Files or Information Stealth
What they do: The LockBit 3.0 payload is decrypted at runtime.
What that means: Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis.
-
T1218.003 CMSTP Stealth
What they do: LockBit 3.0 can attempt a CMSTP UAC bypass if it does not have administrative privileges.
What that means: Adversaries may abuse CMSTP to proxy execution of malicious code.
-
T1480 Execution Guardrails Stealth
What they do: LockBit 3.0 can make execution dependent on specific parameters including a unique passphrase and the system language of the targeted host not being found on a set exclusion list.
What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
-
T1480.002 Mutual Exclusion Stealth
What they do: LockBit 3.0 can create and check for a mutex containing a hash of the `MachineGUID` value at execution to prevent running more than one instance.
What that means: Adversaries may constrain execution or actions based on the presence of a mutex associated with malware.
-
What they do: LockBit 3.0 can check heap memory parameters for indications of a debugger and stop the flow of events to the attached debugger in order to hinder dynamic analysis.
What that means: Adversaries may employ various means to detect and avoid debuggers.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: LockBit 3.0 can disable security tools to evade detection including Windows Defender.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1685.005 Clear Windows Event Logs Defense Impairment
What they do: LockBit 3.0 can delete log files on targeted systems.
What that means: Adversaries may clear Windows Event Logs to hide the activity of an intrusion.
-
T1688 Safe Mode Boot Defense Impairment
What they do: LockBit 3.0 can reboot the infected host into Safe Mode.
What that means: Adversaries may abuse Windows safe mode to disable endpoint defenses.
-
T1057 Process Discovery Discovery
What they do: LockBit 3.0 can identify and terminate specific services.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1082 System Information Discovery Discovery
What they do: LockBit 3.0 can enumerate system hostname and domain.
What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
-
T1083 File and Directory Discovery Discovery
What they do: LockBit 3.0 can exclude files associated with core system functions from encryption.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1120 Peripheral Device Discovery Discovery
What they do: LockBit 3.0 has the ability to discover external storage devices.
What that means: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.
-
T1135 Network Share Discovery Discovery
What they do: LockBit 3.0 can identify network shares on compromised systems.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1614.001 System Language Discovery Discovery
What they do: LockBit 3.0 will not affect machines with language settings matching a defined exlusion list of mainly Eastern European languages.
What that means: Adversaries may attempt to gather information about the system language of a victim in order to infer the geographical location of that host.
-
T1680 Local Storage Discovery Discovery
What they do: LockBit 3.0 can enumerate local drive configuration.
What that means: Adversaries may enumerate local drives, disks, and/or volumes and their attributes like total or free space and volume serial number.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: LockBit 3.0 can use SMB for lateral movement.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1071.001 Web Protocols Command and Control
What they do: LockBit 3.0 can use HTTP to send victim host information to C2.
What that means: Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic.
-
T1132.001 Standard Encoding Command and Control
What they do: LockBit 3.0 can Base64-encode C2 communication.
What that means: Adversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect.
-
T1573.001 Symmetric Cryptography Command and Control
What they do: LockBit 3.0 can encrypt C2 communications with AES.
What that means: Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol.
-
T1486 Data Encrypted for Impact Impact
What they do: LockBit 3.0 can encrypt targeted data using the AES-256, ChaCha20, or RSA-2048 algorithms.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: LockBit 3.0 can terminate targeted processes and services related to security, backup, database management, and other applications that could stop or interfere with encryption.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: LockBit 3.0 can delete volume shadow copies.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (51)
▼Software Lockbit3 has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
Gosecretsdump
LaZagne
LostMyPassword
Mimikatz
NirSoft ExtPassword
PasswordFox
ProcDump
Veeam-Get-Creds
Defense evasion
Backstab/Process Explorer driver (BYOVD)
Defender Control
GMER
PCHunter
PowerTool
ProcessHacker
TDSSKiller
Discovery & enumeration
AdFind
Advanced IP Scanner
Advanced Port Scanner
Bloodhound
Seatbelt
SoftPerfect NetScan
Exfiltration
Anonfiles
FileZilla
FreeFileSync
File[.]io
MEGA
RClone
Sendspace
Temp[.]sh
Tempsend
Transfert-my-files
Transfer[.]sh
WinSCP
LOLBAS (living-off-the-land binaries)
BCDEdit
PsExec
Networking & tunnelling
Ligolo
Ngrok
Plink
Offensive security tooling
Cobalt Strike
Impacket
Koadic
Metasploit
PowerShell Empire
ThunderShell
Remote monitoring & management
Action1
AnyDesk
FixMeIt
ScreenConnect
Splashtop
TeamViewer
ZohoAssist
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Dark Eye.
Victims (2022)
Search, filter and paginate the victim timeline for Lockbit3. Showing 401–500 of 2022.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | lec-london.uk id11164 View details | United Kingdom | Healthcare / Pharma | — | ||
|
With over 30 years of unrivaled expertise in refractive surgery, LEC London boasts a team of distinguished doctors and surgeons committed to delivering unparalleled care and outcomes to our valued patients. Additionally, we are proud to announce that... |
||||||
| Ransomware | gpaa.gov.za id11160 View details | South Africa | Communication / Marketing | — | ||
|
The Government Pensions Administration Agency (GPAA) administers pensions on behalf of its primary clients, the Government Employees Pension Fund (GEPF) and National TreasuryYou can contact the main system administrator on the contacts below, wai... |
||||||
| Ransomware | redwoodcoastrc.org id11143 View details | United States | Construction / Real Estate | — | ||
|
RCRC provides intake, assessment, diagnosis, and coordinates community-based services for over 10,000 children and adults with developmental disabilities in Del Norte, Humboldt, Lake, and Mendocino counties. We work in partnership with many individua... |
||||||
| Ransomware | rmhfranchise.com id11133 View details | United States | Hospitality / Food & Beverage / Tourism | — | ||
|
RMH Franchise, founded in 2012 and headquartered in Atlanta, Georgia, operates as a franchisee of chain restaurants. The Company offers burgers, chicken, steaks, pasta, seafood, and beverages.We have 1.5tb sensitive data.Call me to toxKatie Hec... |
||||||
| Ransomware | sunwave.com.cn id11104 View details | China | Other | — | ||
|
2023-08-07 [公司新闻] 倒计时3天丨Sunwave三十周年庆典暨全球合作伙伴大会，即将绽放精彩! 关于三维 三维通信股份有限公司是国际主流的无线通信解决方案供应商，行业公认的无线信号覆盖、无线专网通信、无线信号安全、卫星通信服务领域的专家。 |
||||||
| Ransomware | central.k12.or.us id11102 View details | United States | Education | — | ||
|
Monmouth Elementary School is a company that operates in the Education industry. It employs 51-100 people and has $10M-$25M of revenue. The company is headquartered in Monmouth, Oregon. |
||||||
| Ransomware | jovani.com id11091 View details | United States | Retail / E-commerce | — | ||
|
Founded in 1983, Jovani Fashion Ltd. has continued to be a fashion leader worldwide. Now entering its 40th year of business, the brand has expanded to include over nine collections in over 2,000 domestic and international stores, including Neiman Mar... |
||||||
| Ransomware | valoremreply.com id11090 View details | United States | IT | — | ||
|
Valorem Reply, part of the Reply Group companies, is a digital transformation firm with innovation, leading-edge technology and deep commitment to exceptional customer experience at the core of who we are. As a trusted Microsoft Partner, we have the... |
||||||
| Ransomware | earnesthealth.com id11080 View details | United States | Healthcare / Pharma | — | ||
|
Welcome to Ernest Health. Ernest Health is a network of rehabilitation and long-term acute care hospitals. Ernest Health hospitals provide specialized medical and rehabilitative services to patients recovering from disabilities caused by injuries or... |
||||||
| Ransomware | stockdevelopment.com id11076 View details | United States | Construction / Real Estate | — | ||
|
Stock development | Real Estate Company | 1TB Doc |
||||||
| Ransomware | aerospace.com id11074 View details | United States | Communication / Marketing | — | ||
|
The Aerospace Corporation: Who We Are. As an independent, nonprofit corporation operating the only FFRDC for the space enterprise, The Aerospace Corporation performs objective technical analyses and assessments for a variety of government, civil, and... |
||||||
| Ransomware | starkpower.de id11073 View details | Germany | Energy | — | ||
|
We are STARK. Strong brands under one roof. Find out more about our brands. STARK is your partner for logistics & professional storage. Learn more. LionTec is your partner for high quality lithium ion batteries . Learn more. Lithionator is your partn... |
||||||
| Ransomware | roehr-stolberg.de id11072 View details | Germany | Communication / Marketing | — | ||
|
Walzblei für Dach & Fassade. Röhr + Stolberg ist Deutschlands führender Hersteller von Walzblei und Bleiwolle für Dächer und Fassaden. Die Produkte zeichnen sich durch extreme Langlebigkeit und Witterungsbeständigkeit aus. Ob klassisches Saturnblei,... |
||||||
| Ransomware | schuett-grundei.de id11071 View details | Germany | Other | — | ||
|
SANITÄTSHAUS. In unseren Sanitätshäusern führen wir frei verkäufliche, sowie individuell angepasste Hilfsmittel rund um Ihre Gesundheit. Unser qualifiziertes Personal steht Ihn gern mit Rat & Tat zur Seite. |
||||||
| Ransomware | unitednotions.com id11070 View details | United States | Other | — | ||
|
unitednotions.com |
||||||
| Ransomware | smuldes.com id11069 View details | Belgium | Manufacturing / Engineering | — | ||
|
A SUSTAINABLE WORLD. Smulders is a multidisciplinary and international construction company with an established reputation in the engineering, production, supply and assembly of heavy, technically complex and architectural steel structures. We are al... |
||||||
| Ransomware | esser-ps.de id11068 View details | Germany | IT | — | ||
|
Lernen Sie jetzt die branchenspezifischen Digitaldruck-Lösungen der ESSER Gruppe kennen. ... Vertriebsmeeting der ESSER Gruppe 2022: die PS auf die Straße bringen. Synergien in einer Familie ohne Nesthäkchen. Weiterlesen 25.10.2022 Erstellt von Marti... |
||||||
| Ransomware | gapsolutions.com.au id11024 View details | Australia | Services | — | ||
|
GaP Solutions offers comprehensive retail products and services as part of our focused business strategy for the Australian and international retail market. Our expert know-how and products have cultivated long-standing partnerships with our clients. |
||||||
| Ransomware | easternshipbuilding.com id11019 View details | Panama | Construction / Real Estate | — | ||
|
Eastern’s original shipyard was established in 1976 for the purpose of constructing commercial fishing boats for the company’s founder and President, Brian R. D’Isernia. As the owner of a fleet of commercial fishing vessels, Mr. D’Isernia ventured in... |
||||||
| Ransomware | vertdure.com id11011 View details | Canada | Finance / Legal / Insurance | — | ||
|
A SUCCESS HOME-GROWN IN QUEBEC!Specializing in lawn treatment since its humble beginnings in 1987, over the years, EagleYard has become the industry leader, while remaining 100% Quebec-owned.Today, for your lawn maintenance, no matter where yo... |
||||||
| Ransomware | sundbirsta.com id11010 View details | Sweden | Transportation / Travel / Logistics | — | ||
|
Solutions for wire, rod and strip millsOnce the wire, rod or sheet has been rolled into its final shape, our equipment ensures that it is prepared for delivery according to the specifications of the end customer. Our handling systems include functi... |
||||||
| Ransomware | npgandour.com id10998 View details | Côte d'Ivoire | Other | — | ||
|
Nouvelle Parfumerie Gandour is a company that operates in the Internet industry. It employs 101-250 people and has $25M-$50M of revenue. |
||||||
| Ransomware | prattindustries.com id10988 View details | United States | Communication / Marketing | — | ||
|
Pratt Industries is a leading manufacturer of corrugated boxes and displays, as well as clean energy solutions and paper products. Learn more about their products, services, and sustainability efforts on their website.You can contact the main sys... |
||||||
| Ransomware | silganhodlings.com id10978 View details | United States | Communication / Marketing | — | ||
|
About Us Building Franchise, Creating Value Silgan is a leading global sustainable packaging provider for consumer goods products to many of the world's best known consumer products companies. |
||||||
| Ransomware | silganholdings.com id10974 View details | United States | Manufacturing / Engineering | — | ||
|
Silgan Holdings is a Connecticut-based American manufacturing company that produces consumer goods packaging. The company was founded in 1987 by two former executives of Continental Can, Phil Silver and Greg Horrigan – their names contributing to the... |
||||||
| Ransomware | ernesthealth.com id10973 View details | United States | Healthcare / Pharma | — | ||
|
Ernest Health is a network of hospitals that provide specialized medical and rehabilitative services to patients recovering from disabilities or chronic conditions. Learn more about their services, locations, awards, and patient stories on their webs... |
||||||
| Ransomware | apeagers.com.au id10967 View details | New Zealand | Manufacturing / Engineering | — | ||
|
Eagers Automotive is an automotive retail group in Australia and New Zealand. Starting as A P Eagers Automotive Limited, it has a history of more than 100 years. The company name changed to Eagers Automotive Limited from A.P. Eagers Limited in 2020 f... |
||||||
| Ransomware | dunaway.com id10964 View details | United States | Construction / Real Estate | — | ||
|
Construction Inspection Civil Engineering Structural Engineering Landscape Architecture Survey Construction Inspection Our Featured Projects Bowie House Planning + Landscape Architecture ... READ MORE Mary Will Craig Park Midland Polo Club Killeen Hi... |
||||||
| Ransomware | crbgroup.com id10963 View details | United States | Construction / Real Estate | — | ||
|
A revolutionary integrated project delivery method that leverages the combined expertise and technical excellence of ONE project team to deliver your facility in a safe, lean and collaborative way. Engineering Architecture Construction Consulting The... |
||||||
| Ransomware | nationaldentex.com id10962 View details | United States | Healthcare / Pharma | — | ||
|
National Dentex is a full-service dental lab partner that offers a wide range of services, products and solutions for dentists and their patients. Whether you need crowns, bridges, veneers, implants or orthodontics, National Dentex can help you enhan... |
||||||
| Ransomware | equilend.com id10961 View details | United States | Finance / Legal / Insurance | — | ||
|
DataLend provides global securities finance data, performance reporting and consulting services for agent lenders, broker-dealers and beneficial owners. Learn More Securities Finance PlatformYou can contact the main system administrator on the... |
||||||
| Ransomware | magierp.com id10960 View details | United States | Services | — | ||
|
MAGI develops and supports high quality ERP business solutions for small to mid-sized manufacturers. MAGI has been developing software solutions since 1985 and has installations worldwide. Our premier product, WinMAGI, is a world class manufacturing... |
||||||
| Ransomware | soco.be id10908 View details | Belgium | Other | — | ||
|
Voitures d'occasion à partir de Zéro kilomètre |
||||||
| Ransomware | aeromechinc.com id10901 View details | United States | Retail / E-commerce | — | ||
|
AeroMech Incorporated is a small, dynamic FAA ODA that specializes in airworthiness / aircraft certification, flight testing and provides engineering services to OEMs, airlines, operators, modification shops, and military customers worldwide. AeroMec... |
||||||
| Ransomware | carlfischer.com id10900 View details | United States | Other | — | ||
|
Helping educators and musicians |
||||||
| Ransomware | bucher-strauss.ch id10898 View details | Switzerland | Other | — | ||
|
140 gigabytes of data |
||||||
| Ransomware | etisalat.ae id10878 View details | United Arab Emirates | Telecommunications | — | ||
|
Emirates Telecommunications Group Company PJSC, doing business as etisalat by e&, is an UAE state-owned telecommunications company. It is the 18th largest mobile network operator in the world by number of subscribers. |
||||||
| Ransomware | theclosingagent.com id10877 View details | United States | Construction / Real Estate | — | ||
|
The Closing Agent is the Orlando Title Company. Real Estate Closing Solution for all of title insurance and settlement needs.Hundreds of terabytes with sensitive data are in our possession. |
||||||
| Ransomware | spaldingssd.com id10876 View details | Canada | Communication / Marketing | — | ||
|
Spalding SSD was established in Calgary in 1952 and has been providing opening solutions to Alberta and Western Canada ever since. Today, we have vast experience providing doors, frames and access control to schools, hospitals, and municipalities on... |
||||||
| Ransomware | tormetal.cl id10875 View details | Chile | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
||||||
| Ransomware | champion.com.co id10854 View details | Colombia | Transportation / Travel / Logistics | — | ||
|
International freight forwarding & logistics providers |
||||||
| Ransomware | coreengg.com id10853 View details | United States | Manufacturing / Engineering | — | ||
|
Core Engineering LLC was founded in 2007, in Corpus Christi, TX. We have grown over the last few years, expanding our services over several states. We are a full-service engineering firm with a multi-discipline team of highly-motivated professionals. |
||||||
| Ransomware | sitrack.com id10852 View details | Argentina | Services | — | ||
|
By using our services, you’ll be able to control and ensure the welfare of your capital, reducing costs, observing and making its operation effective. |
||||||
| Ransomware | hatsinteriors.com id10851 View details | United Arab Emirates | Communication / Marketing | — | ||
|
Hats Project Management provides its expertise through a wide range of fee based services across a wide range of construction sectors tailored to meet the specific requirements of our client, the project and the geographic location of the particular... |
||||||
| Ransomware | pradiergranulats.fr id10850 View details | France | Communication / Marketing | — | ||
|
Pradier Granulats, acteur majeur de l'extraction, de la production et de l'ensachage de granulats pour la construction et l'aménagement extérieur produit 700 000 T de produits conditionnés en sac, big-bag et vrac par an. Les trois sites de production... |
||||||
| Ransomware | centralepaysanne.lu id10849 View details | Luxembourg | Agriculture / Food | — | ||
|
Founded in 1944, the Central Paysanne Luxembourgeoise, the largest and oldest professional organisation for farmers, winemakers and gardeners, is headed by a nine-member board. |
||||||
| Ransomware | studiogalbusera.com id10845 View details | Italy | Other | — | ||
|
Studio Galbusera Commercialisti AssociatiWe have full data from File server and another critical data (more 500gb) |
||||||
| Ransomware | kabat.pl id10837 View details | Poland | Communication / Marketing | — | ||
|
Opony i dętki Kabat Tyre do maszyn rolniczych, budowlanych i nie tylko. Nasze produkty to gwarancja jakości, wytrzymałości. |
||||||
| Ransomware | wsnelson.com id10835 View details | United States | Other | — | ||
|
Waldemar S. Nelson and Company, Inc. |
||||||
| Ransomware | fultoncountyga.gov id10834 View details | United States | Public Sector | — | ||
|
Fulton County GovernmentFulton County's budget of $1.2 billion funds an array of resident services.Fulton County offers a variety of services for businesses to expand. Fulton County is located in Atlanta Georgia.We will demonstrate how local... |
||||||
| Ransomware | mmiculinary.com id10830 View details | United States | Communication / Marketing | — | ||
|
Greetings!Today we are posting here the new company, "Mr Mudbug .Inc".Company Description: MMIculinary has been producing quality food products since 1986.Headquarters: 615 23rd St S, Birmingham, Alabama, 35233, USAMail: vincemaenza@m... |
||||||
| Ransomware | adioscancer.com id10829 View details | United States | Other | — | ||
|
Caribbean Radiation Oncology Center |
||||||
| Ransomware | rajawali.com id10827 View details | Indonesia | Construction / Real Estate | — | ||
|
Rajawali Group is an Indonesia National Investment Holding Company operating in diverse industries covering plantation, mining, hotel and property (Sheraton, Luxury Collection, St Regis and Four Seasons), infrastructure, transportation (Express Taxi)... |
||||||
| Ransomware | motilaloswal.com id10826 View details | India | Services | — | ||
|
Sharekhan write to us. I think you might be interested to see their confidential company data.Motilal Oswal provides products and services related to equity trading, commodity trading and investment advisory services, IPOs and SIPs investment, port... |
||||||
| Ransomware | universalservicesms.com id10817 View details | United States | Services | — | ||
|
Greetings!Today we are posting here the new company, "Universal Services LLC".Company Description: Universal Services LLC offers the unique capability of in-house design, fabrication, and installation; saving cost, schedule, and coordination.... |
||||||
| Ransomware | doprastav.sk id10815 View details | Slovakia | Communication / Marketing | — | ||
|
Doprastav, JSC is a modern construction company with the history of more than half a century which is capable to offer the construction of buildings and structures of any kind.For each investor the Doprastav, JSC trademark represents a guarantee... |
||||||
| Ransomware | auruminstitute.org id10808 View details | South Africa | Education | — | ||
|
The Aurum Institute has so many vulnerabilities in its network that we managed to steal all sensitive data including such as:-Personal information-Financial documents.-Research-Patient health data and the results of various experiments.-P... |
||||||
| Ransomware | tecasrl.it id10803 View details | Italy | Other | — | ||
|
TECA Srl is a company that operates in the Wholesale industry. It employs 6-10 people and has $1M-$5M of revenue. This company have a data leak with confidential data. |
||||||
| Ransomware | vhprimary.com id10793 View details | United Arab Emirates | Communication / Marketing | — | ||
|
Victory Heights - A British-curriculum Primary School in Dubai |
||||||
| Ransomware | germaintoiture.fr id10792 View details | France | Other | — | ||
|
henri germain |
||||||
| Ransomware | jacksonvillebeach.org id10787 View details | United States | Other | — | ||
|
Jacksonville Beach, FL |
||||||
| Ransomware | robs.org id10786 View details | United States | Education | — | ||
|
River Oaks Baptist School is a private Christian school with grades Preschool-8 in the heart of Houston, Texas |
||||||
| Ransomware | parkhomeassist.co.uk id10785 View details | United Kingdom | Finance / Legal / Insurance | — | ||
|
Park Home Assist: Park Home Insurance SpecialistsPark Home Assistparkhomeassist.co.ukPark Home Assist is one of the UK's leading providers of residential park and leisure lodge insurance |
||||||
| Ransomware | grotonschools.org id10784 View details | United States | Education | — | ||
|
grotonschools.orgGroton Public Schools (GPS, Groton School District) is a school district in New London County, Connecticut based in the city of Groton, Connecticut, United States. The Groton Public School District services approximately 4,000 stud... |
||||||
| Ransomware | isspol.gov id10783 View details | Ecuador | Other | — | ||
|
ISSPOL – Somos el nuevo ISSPOL |
||||||
| Ransomware | lyon.co.uk id10782 View details | United Kingdom | Other | — | ||
|
ABOUT LYON EQUIPMENTWhere did Lyon come from?Way back in 1965, Ben Lyon, aided by engineer brother Graham, started making caving ladders. The name 'Lyon Ladders' was registered in 1973.In the same year Ben, with Mike Meredith, took a party of... |
||||||
| Ransomware | dienerprecisionpumps.com id10781 View details | Switzerland | Communication / Marketing | — | ||
|
More than 25 years of experience in design, engineering and quality production of precision metering and micro gear pumps |
||||||
| Ransomware | envie.org id10780 View details | France | Other | — | ||
|
Réseau ENVIE: Site de la Fédération Envie https://www.envie.org Bienvenue sur le site officiel du réseau et de la Fédération Envie ! Créé en 1984, Envie est un pionnier de l'économie circulaire et participe |
||||||
| Ransomware | sealco-leb.com id10779 View details | Lebanon | Other | — | ||
|
On January 1st 2010, SEALCO (Shaker Electronics and Appliances Lebanon Co), started its operation in Lebanon as the new authorized distributor for LG Consumer Electronics and Appliances. |
||||||
| Ransomware | camarotto.it id10778 View details | Italy | Other | — | ||
|
camarotto.it |
||||||
| Ransomware | paltertonprimary.co.uk id10777 View details | United Kingdom | Communication / Marketing | — | ||
|
Palterton Primary School |
||||||
| Ransomware | fidcornelis.be id10776 View details | Belgium | Other | — | ||
|
Fiduciaire Cornelis & Budts Informatie Bisschoppenhoflaan 384 bus 3, 2100 Antwerpen |
||||||
| Ransomware | plexustelerad.com id10775 View details | United States | Other | — | ||
|
PLEXUSTELERAD.COM |
||||||
| Ransomware | cabc.com.ar id10774 View details | Argentina | Other | — | ||
|
Cámara Arbitral de la Bolsa de Cereales |
||||||
| Ransomware | textiles.org.tw id10773 View details | Taiwan, Province of China | Communication / Marketing | — | ||
|
Taiwan Textiles-Sustainable Innovation - 紡拓會Textile Export Promotion Project by. Taiwan Textile Federation |
||||||
| Ransomware | silverairways.com id10772 View details | Bahamas | Transportation / Travel / Logistics | — | ||
|
Silver Airways is a leading regional U.S. airline operating flights between gateways in Florida, the Southeast and The Bahamas. Silver Airways, affiliates of Versa Capital, is headquartered in Fort Lauderdale, FL. The Silver Airways fleet is comp... |
||||||
| Ransomware | lacolline-skincare.com id10767 View details | Switzerland | Communication / Marketing | — | ||
|
We have put into our products everything we value in Switzerland: a world-renowned research network in cellular biology, the diversity of Alpine nature, along with the valued and time-honored practices of precision, efficiency and safety. |
||||||
| Ransomware | aisg-online.com id10753 View details | United States | Telecommunications | — | ||
|
American Integrated Security Group (AISG) specializes in the design and deployment of open platform integrated systems including IP video surveillance, access control and security intrusion, perimeter protection and a full range of related wireless s... |
||||||
| Ransomware | verdimed.es id10751 View details | Spain | Agriculture / Food | — | ||
|
In the eighties, from a company with extensive experience in agriculture and production in Valencia, Verdimed was born to expand marketing into the vegetable sector. At the end of this decade, in an effort to benefit from the climate for crops, we mo... |
||||||
| Ransomware | water.cc id10749 View details | United States | Other | — | ||
|
Living Water InternationalPursuing the physical, spiritual, and social flourishing of all people who lack safe water, sanitation, and hygiene through the global Christian community. |
||||||
| Ransomware | magi-erp.com id10745 View details | United States | Services | — | ||
|
MAGI develops and supports high quality ERP business solutions for small to mid-sized manufacturers. MAGI has been developing software solutions since 1985 and has installations worldwide. Our premier product, WinMAGI, is a world class manufacturing... |
||||||
| Ransomware | alfiras.com id10740 View details | United Arab Emirates | Construction / Real Estate | — | ||
|
2tb dataEstablished in 1988, Al Firas is a leading contracting company based in Abu Dhabi. As a trusted and known contractor, Al Firas delivers sustainable projects of high quality, including High Rise Commercial and Residential Buildings, School... |
||||||
| Ransomware | grupomoraval.com id10738 View details | Spain | Construction / Real Estate | — | ||
|
Founded more than 20 years ago by experienced professionals in the field of construction and real estate, Grupo Moraval is a team of more than 30 top professionals dedicated to high-quality development, design and implementation of real estate proper... |
||||||
| Ransomware | cdtmedicus.pl id10737 View details | Poland | Healthcare / Pharma | — | ||
|
The Medicus Diagnostic and Therapy Center has 19 specialized clinics where patients can receive professional advice from doctors.specialists, and thereby take care of the health of yourself and your loved ones. |
||||||
| Ransomware | soken-ce.co.jp id10736 View details | Japan | Retail / E-commerce | — | ||
|
Since its founding in 1948, the Soken Kagaku Group has developed unique technologies in fields such as home appliances, automobiles, and building materials, based on the founding spirit of ``Let's be the best company, no matter how small, and contrib... |
||||||
| Ransomware | maximumresearch.com id10735 View details | United States | Other | — | ||
|
MAXimum Research, Inc. is a market research firm with over 300 CATI stations. Our facility houses a100 CATI station phone room, in addition to 200+ remote agents across the US. Based in Southern New Jersey, just minutes from Philadelphia, MAXimum Res... |
||||||
| Ransomware | indoramaventures.com id10734 View details | Thailand | Manufacturing / Engineering | — | ||
|
Indorama Ventures is a world-class sustainable chemical company making great products for society. |
||||||
| Ransomware | northseayachtsupport.nl id10732 View details | Netherlands | Services | — | ||
|
The challenge for Northsea lies in the involvement from design to manufacturing. By combining modern production techniques and hand craft, Northsea: designs, develops and manufactures high-quality finished stainless steel products for luxury yacht bu... |
||||||
| Ransomware | seymourct.org id10731 View details | United States | Other | — | ||
|
seymourct.org |
||||||
| Ransomware | bsaarchitects.com id10730 View details | United States | Construction / Real Estate | — | ||
|
Bull Stockwell Allen – Architecture + Planning + InteriorsBull Stockwell Allen is an award winning architecture, interior design and planning firm known for its work in hospitality and resort projects |
||||||
| Ransomware | moneyadvicetrust.org id10729 View details | United Kingdom | NGOs / Associations | — | ||
|
The Money Advice Trust is a national charity, helping people across the UK to tackle their debts and manage their money with confidence. |
||||||
| Ransomware | macqueeneq.com id10727 View details | United States | Education | — | ||
|
Since 1961 the MacQueen Equipment Group has been growing and serving multiple heavy equipment industries in the Midwest. In addition to sales, MacQueen has five service facilities that provide maintenance, parts and training that deliver maximum upti... |
||||||
| Ransomware | galbusera.it id10725 View details | Italy | Communication / Marketing | — | ||
|
Galbusera is an Italian food company that produces biscuits, crackers and snacks. There were stolen about 500 gb of data including their contracts and private data of their employers and clients |
||||||
| Ransomware | perkinsmfg.com id10722 View details | United States | Communication / Marketing | — | ||
|
Perkins Manufacturing was one of my father’s biggest pride and joy. My siblings and I grew up chasing garbage trucks and going to visit dumpers in the back of restaurants all through our childhood. When I got married we even had our wedding presents... |
||||||
| Ransomware | originalfootwear.com id10721 View details | United States | Finance / Legal / Insurance | — | ||
|
Original Footwear is the leading manufacturer of occupational and tactical footwear for military, law enforcement and first responders. Founded in 1999, and based in Morrison. Tennessee, Original Footwear is the parent of Altama, Original S.W.A.T and... |
||||||
| Ransomware | axsbolivia.com id10704 View details | Bolivia, Plurinational State of | Communication / Marketing | — | ||
|
AXS Bolivia es la empresa de telecomunicaciones der en Bolivia. Ofrece productos, servicios y soluciones de Internet |
||||||
| Ransomware | vimarequipment.com id10703 View details | Canada | Manufacturing / Engineering | — | ||
|
In 1975, Vimar Machinery was founded by Maurice Roden. Maurice carried Vactor, bringing on more brands such as Elgin as the years went on and the business grew. In 1979, Maurice had his sons, Michael and Garth, join the company, where in 1995, they b... |
||||||
| Ransomware | themisbourne.co.uk id10678 View details | United Kingdom | Education | — | ||
|
The Misbourne is a secondary school in Great Missenden, Buckinghamshire. It is an Academy which takes children from the age of 11 through to the age of 19.We have students data, bank details, salary data, HR data, many confidential agreements, et... |
||||||
| Ransomware | hutchpaving.com id10676 View details | United States | Finance / Legal / Insurance | — | ||
|
Hutch PavingCommercial & Residential Construction Employees (lists with ssn numbers, residential address, DOB, passport scans, contracts, information on salaries, bonuses and other confidential documents for employees) Finance (budget, audit, tax... |
||||||
| Ransomware | davis-french-associates.co.uk id10675 View details | United Kingdom | Services | — | ||
|
Davis French & Associates Ltd: Providing Disaster Response, Damage Management, Business Continuity and Recovery services to Insurers |
||||||