LockBit’s Dark Web Domains Hacked, Internal Data and Wallets Leaked

LockBit’s dark web domains were hijacked and defaced in May 2025, and an attacker published a dump containing affiliate communications, internal tooling details and over 60,000 Bitcoin wallet addresses tied to the group; analysts suspect a rival group or hacktivist with insider knowledge conducted the breach, which undermines LockBit’s operations while providing material that could aid law enforcement and researchers.