LockBit 3.0 Ransomware Activity in the UAE
LockBit 3.0 has claimed 10 organisations in the United Arab Emirates, which is 8.9% of all attributed UAE claims. Its activity concentrates in Professional Services, accounting for 4 of those claims. The first LockBit 3.0 claim against a UAE organisation was recorded on , the most recent on .
Data as of , drawn from 192 leak-site claims collected by ransomware.live. This page counts LockBit 3.0 claims only. How this data is collected and filtered.
Which UAE sectors LockBit 3.0 targets
| Name | Relative volume | Incidents | Share |
|---|---|---|---|
| Professional Services | 4 | 40% | |
| Government and Defense | 1 | 10% | |
| Technology | 1 | 10% | |
| Retail and E-Commerce | 1 | 10% | |
| Manufacturing | 1 | 10% | |
| Healthcare | 1 | 10% | |
| Other | 1 | 10% | |
| Total | 10 | 100% |
When LockBit 3.0 claimed UAE organisations
LockBit 3.0 leads the UAE record with 10 claimed organisations, yet it has claimed nothing in the country since February 2024.
LockBit 3.0 leads the UAE record with 10 claimed organisations
LockBit 3.0 ranks first of 47 groups on this tracker. It reached across 7 distinct sectors, the widest sector spread of any group here. Neither figure describes current activity. The group has claimed nothing in the United Arab Emirates since February 2024.
LockBit 3.0 has claimed no UAE organisation since February 2024
Leak-site monitoring recorded the first LockBit 3.0 claim against a UAE organisation on 9 November 2022. The most recent was recorded on 16 February 2024. The group claimed 1 organisation in the 2020 to 2022 period, 5 in 2023 and 4 in 2024.
LockBit 3.0 has recorded nothing in 2025 or 2026. Its 5 claims in 2023 remain the highest single-group total in any period on this tracker. A group can therefore top the all-time table while contributing nothing to current activity.
Professional Services absorbed 4 of the 10 claims. Government and Defense and Technology account for 1 each, with the remainder spread across four further sectors.
What this means for UAE organisations
- Read this page as history rather than as a current threat picture, because the record stops in February 2024.
- Treat the all-time ranking with caution, since rank measures accumulated claims and not present activity.
- Note that LockBit 3.0 reached 7 sectors, so its targeting showed no sector preference worth defending against specifically.
- Compare this profile against DragonForce, whose activity sits entirely in 2026.
- Keep versioned variants distinct, because the earlier LockBit operation is counted separately here and its UAE record closed in 2022.
- Avoid building controls around a named operation, given how completely the leading names have turned over since 2024.
- Use the sector pages instead when deciding where to spend, since sectors persist while groups do not.