was the specific nature of the incident nor who was responsible. Despite this, the siliconANGLE website reports that the LockBit ransomware gang was responsible. Despite this, LockBit has made no such claim on its darknet leak site, despite the ransom...

The FBI is inviting victims of the LockBit ransomware gang to reach out after it secured 7,000 decryption keys from the threat group. During a keynote at the 2024 Boston Conference on Cyber Security discussing its ongoing disruption of LockBit, a...

the infamous CitrixBleed vulnerability of 2023 – CVE 2023-4966 – which was heavily exploited by ransomware actors such as LockBit during its heyday. “CVE-2025-5777 is shaping up to be every bit as serious as CitrixBleed, a vulnerability that caused...

Kingsley-based TPG Aged Care has been listed as a victim on LockBit’s leak site, and several internal documents with personal details of elderly clients have already been published. An affiliate of the LockBit ransomware gang is claiming to have...

and commonly advertises its services on Russian-language hacking forums. The group is believed to have links to the LockBit ransomware operation and engages in double-extortion tactics, both locking victims out of their data and threatening to publish...

on Russian-language hacking forums. To date, the threat group has 558 victims. The group is believed to have links to the LockBit ransomware operation and engages in double-extortion tactics. It has claimed 505 victims to date, over double what it had...

appears to have more up-to-date data. According to that site, the group had at least once relied on a version of the LockBit ransomware variant for its attacks and was known to exploit a particular Microsoft Windows CLFS Driver Privilege Escalation...

Court grants injunction against accessing any data currently published or to be published in the future following a LockBit ransomware attack. The Supreme Court of NSW has granted an injunction restraining third parties from accessing or disseminating...

The LockBit ransomware gang is threatening to publish more than 40,000 files stolen from the Wattle Range Council. A South Australian council is the latest victim of the LockBit ransomware gang, with the criminals posting details of the attack on their...

quickly, preventing a full exfiltration of data. In 2023, the Royal Mail suffered a ransomware attack at the hands of the LockBit ransomware group. While LockBit listed the leak as belonging to Royal Mail and set a ransom demand of roughly AU$114.5...

exfiltration of data. Prior to this, in 2023, Royal Mail International suffered a ransomware attack at the hands of the LockBit ransomware group, who confused it with the much larger Royal Mail and demanded a ransom of roughly AU$114.5 million (£65.7...

to be claiming responsibility for the same incident. On 30 August, the company was listed on the dark web leak site of LockBit 3.0, which threatened to publish data on 13 September. Outside of the listing, the ransomware gang has not said what data was...

Malaysia, though that appears to be entirely based on the name alone. The group is believed to have some links to the LockBit ransomware operation and engages in double-extortion tactics, locking victims out of their data and threatening to publish it...

leak site, the group is likely composed of non-native English speakers. The group is believed to have some links to the LockBit ransomware operation and engages in double extortion tactics, locking victims out of their data and threatening to publish it...

and commonly advertises its services on Russian-language hacking forums. The group is believed to have links to the LockBit ransomware operation and engages in double-extortion tactics. It has claimed 505 victims to date, over double what it had in just...

and commonly advertises its services on Russian-language hacking forums. The group is believed to have links to the LockBit ransomware operation and engages in double-extortion tactics. It has claimed 248 victims to date, with the most recent Australian...

Not the bears! LockBit ransomware operation lists a beloved teddy bear outlet as a victim on its darknet leak site. Like a jack-in-the-box, the LockBit ransomware operation keeps popping up, reminding cyber watchers that – despite several takedowns –...

is ThreeAM? According to researchers, ThreeAM is part of a nebulous group of ransomware actors with suspected ties to the LockBit operation. Analysts at cyber security firm Fortra believe ThreeAM is made up of Russian speakers, and the group may also...

and commonly advertises its services on Russian-language hacking forums. The group is believed to have links to the LockBit ransomware operation and engages in double-extortion tactics. It has claimed 599 victims to date, over double what it had in just...

Cyber Security Centre and is “working in accordance with the guidance provided”. Who is Qilin? While the depleted LockBit group remains the most devastating ransomware actor in terms of victim count over the last four years, 2025 and – so far – 2026...