Ransomware group
Lockbit5 ransomware: victims and leak site activity
The Lockbit5 ransomware group has listed 358 victims on its leak site since December 2025; its latest post is from 9 September 2026. Most affected countries: United States, Brazil and Italy. Most targeted sector: Manufacturing.
Total posts
358
First seen
2025-12-07
Latest post
2026-09-09
Countries hit
68
About Lockbit5
LockBit 5.0 ("ChuongDong") emerged in September 2025 as the group's resurgence following the February 2024 law enforcement takedown, introducing cross-platform payloads targeting Windows, Linux, and VMware ESXi with enhanced evasion capabilities and continuing the RaaS affiliate model of its predecessors.
Most targeted countries
- United States 66
- Brazil 28
- Italy 27
- Germany 24
- Mexico 16
- Netherlands 14
- France 13
- India 9
- Spain 8
- Thailand 8
Most targeted sectors
- Manufacturing 62
- Professional Services 61
- Technology 47
- Healthcare 32
- Agriculture and Food Production 25
- Retail & E-Commerce 23
- Education 20
- Government & Defense 15
- Hospitality 15
- Transportation 13