bitlocker is a ransomware operator no longer publishing new disclosures. Darkfield has indexed 2 public victims claimed by this operator between March 1, 2022 and May 2, 2022. BitLocker is an obscure ransomware group that emerged in March 2022, operating with financial motivations but maintaining a relatively small operational footprint with only two documented victims to date. The group's origin and affiliations remain unclear due to limited public documentation, though their targeting pattern suggests independent operations rather than a established ransomware-as-a-service model. Given the minimal public information available from major security firms and law enforcement agencies, their attack methodology and technical capabilities are not well-documented, though their victims span across Russia and the United States, focusing primarily on the food and agriculture sector as well as educational facilities. No notable high-profile campaigns or major ransoms have been publicly reported by security researchers or government agencies, indicating either highly selective targeting or limited operational success. The current operational status of the BitLocker ransomware group remains uncertain due to insufficient public intelligence and the group's apparent low-profile nature within the broader ransomware ecosystem.

Recent disclosures by bitlocker

All 2 indexed disclosures. Click any row for the full per-victim dossier.

• State Bar of GeorgiaEducation Facilities · United States · May 2, 2022
• Miratorg Agribusiness HoldingFood and Agriculture · Russia · March 1, 2022

See every disclosure indexed for bitlocker →