R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/lorenz

lorenz

Inactive

Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by the attackers. A free decryptor for 2021 versions was made available via the NoMoreRansom initiative. A new version of the malware was discovered in March 2022, for which again was provided a free decryptor, while the ransomware operators are not able to provide tools to decrypt affected files.

78
Victims
2
Sites

Known Leak Sites

lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onionDLS
lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onionDLS

Victims (78)

Live
Bayer Heritage Federal Credit Union
lorenz
EOS
lorenz
Koh Brothers
lorenz
Cogdell Memorial Hospital
lorenz
Truck Bodies & Equipment International
lorenz
Broad River Retail/Ashley Store
lorenz
AllCare Pharmacy
lorenz
BF&S Civil Engineers
lorenz
Dee Sign
lorenz
Felling Trailers, Inc.
lorenz
Tarolli, Sundheim, Covell & Tummino LLP
lorenz
Joy Cone Co, Joy Baking group, BoDeans Baking, Altesa
lorenz
NGS Super
lorenz
Intrasect Technologies
lorenz
Moore Engineering
lorenz
Manning Building Supplies
lorenz
Tarolli
lorenz
Hopsteiner
lorenz
AmerisourceBergen/Censora - MWI Animal Health
lorenz
Chestertons Inc.
lorenz
Thor Specialties, Inc.
lorenz
Shelco
lorenz
Albina Asphalt
lorenz
Holler-Classic
lorenz
Nissan of Las Cruces
lorenz

Top Targeted Countries

Unknown77
Australia1

Activity

Total victims78
Countries affected2
Last seen