LockBit
Data Breach
lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion75
Records Exposed
Apr 2025
Date of Breach
Database
Breach Type
Sep 2026
Added to Database
About This Breach
In April 2025, LockBit, one of the most prolific ransomware-as-a-service operations, had its affiliate administration panel database compromised and leaked publicly as a phpMyAdmin SQL dump generated on 29 April 2025. The exposed database contained 75 affiliate and administrator accounts, including their usernames and plaintext passwords, together with Bitcoin ransom-collection addresses, invite codes, Tox messaging IDs and internal permission and activity metadata. Affiliate passwords were notably stored in plain text rather than hashed. The records were distributed via Telegram and prominent cybercrime forums.
Compromised Data Types
Country
Russia
Language
English
Category
Ransomware
Indexed On
Sep 30, 2026
Breach Type
Database
What Should You Do?
Get Full Breach Details with LeakedSource Pro
Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.
Sign Up for Pro- Change your password immediately on LockBit and any other site where you used the same password. Use a unique, strong password for each account.
- Be cautious of mail fraud. Your physical address may be used for targeted scams or identity theft attempts.
- Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
- Use a password manager to generate and store unique, strong passwords for every account.
Were You Affected by This Breach?
Enter your email below to instantly check if your data was compromised in the LockBit breach and 12,000+ other known breaches.
