LockBit Ransomware: Timeline, Status and the Attacks We Reported

LockBit is a ransomware gang that rents its malware to other criminals. Police took over its servers in February 2024, yet it is still posting victims in 2026 with a new version, LockBit 5.0.

Its alleged leader has been charged and sanctioned but is still free. Two affiliates have pleaded guilty in the US, and an alleged developer faces trial there.

This page also revisits seven attacks we reported in 2023 and 2024 from LockBit’s own claims. We checked each one again in November 2026. Two of the organisations confirmed an incident; for the other five, LockBit’s word is still the only source.

Source: Privacy Affairs · 2026-11-11