// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdReconThreat GroupsLockBit
Threat Group Dossier

LockBit

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
LockBit — 15 attributed incidents across our corpus.
Incidents on file15
First seen2023-01-01
Last seen2026-08-24
Top sectorfinancial

Techniques observed (MITRE ATT&CK)

Sectors targeted

financial (2)semiconductor (2)Healthcare (2)cybercrime (1)transportation (1)Food & Beverage (1)aerospace (1)healthcare (1)financial services (1)

Attributed breaches

2026-08-24
ransomware
US Bank
2026-08-23
ransomware
US Bank
2025-05-12
ransomware
LockBit
2024-10-30
2024-06-14
ransomware
Kulicke and Soffa
2024-05-01
2024-03-01
ransomware
ConnectWise
2024-01-23
ransomware
Subway
2024-01-23
2023-11-10
ransomware
gotocfr.com
2023-11-10
ransomware
Boeing
2023-06-01
ransomware
dental insurer
2023-05-31
ransomware
MCNA Dental
2023-05-30
ransomware
MCNA
2023-01-01

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →