Ransomware needs a way in. Stolen credentials are the cheapest one.

Wilhelmsen Group Ransomware Attack

wilhelmsen.comRansomed

lockbit5Group

NorwayCountry

Feb 20, 2026Discovered

Overview

View group profile

Domain

wilhelmsen.com

Industry

Transportation

Country

Norway

Discovered

6 months ago

Attack date

Feb 20, 2026

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

lockbit5

Total victims

First seen

Jul 2026

Last seen

Jul 2026

Group status

active

Sophistication

Impact score

150

Threat level

2.5/10

Aggressiveness5/10

Lethality0/10

Criticality2.3/10

Status breakdown

Claimed

this victim

100.0%302

Targeted sectors

Financial Services Healthcare Manufacturing Other Technology Transportation

Victim's position within group

Industry

Transportation

Known target sector

Country

Norway

Frequently targeted country

Other victims

View all (303)

Same group · lockbit5

Briggs of Burton
United Kingdom
Claimed
SMS-SME
Singapore
Claimed
Delkart Industries Limited
India
Claimed
Micropack
Argentina
Claimed
Sirsa S.p.a.
Italy
Claimed
Bancroft Engineering
United States
Claimed

Group activity

Monthly attacks · lockbit5

total · avg 1/mo