Ransomware Group intelligence
Deadlock
ActiveTrack Deadlock with 176 published victims and 3 known leak locations in a single intelligence view.
Overview
Deadlock is tracked by Breach House as a ransomware group with 176 published victims.
Italy is currently the most targeted country in this dataset.
3 known leak locations are currently associated with this group.
Leak Status Distribution
- Leaked 17 34.7%
- Pending 30 61.2%
- Deleted 2 4.1%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (3)
| Label | Type | Availability | Links |
|---|---|---|---|
| File host (third party) | Third-party file host | Up checked 2h ago | www.swisstransfer.com |
| Leak location 2 | Onion service | Up checked 2h ago | deadblogdbdu5wprek7wa2o4ce7rnt6u6ntqeud3hzjjcveosgpsqqqd.onion |
| Leak location 1 | Web location | Up checked 2h ago | deadlock.liveblog365.com |
Top Activity Sectors (15)
- IT 16
- Manufacturing / Engineering 10
- Retail / E-commerce 7
- Not identified 6
- Finance / Legal / Insurance 5
- Transportation / Travel / Logistics 4
- NGOs / Associations 4
- Healthcare / Pharma 3
- Energy 3
- Construction / Real Estate 3
- Public Sector 2
- Services 2
- Education 2
- Telecommunications 2
- Hospitality / Food & Beverage / Tourism 1
Typical Attacks (9)
▼MITRE ATT&CK does not currently catalogue Deadlock, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.003 Windows Command Shell Execution
What they do: Deadlock executes commands via cmd.exe
What that means: Adversaries may abuse the Windows command shell for execution.
-
What that means: Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence.
-
T1070.004 File Deletion Stealth
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1083 File and Directory Discovery Discovery
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1135 Network Share Discovery Discovery
What they do: Deadlock discovers network shares with net view
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: Deadlock moves laterally using SMB shares
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: Deadlock encrypts files with custom ransomware
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: Deadlock stops services using net stop
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: Deadlock inhibits recovery with vssadmin
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Victims (176)
Search, filter and paginate the victim timeline for Deadlock. Showing 1–100 of 176.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA id32088 View details | United States | Finance / Legal / Insurance | — | leaked | |
|
slgjustice.com operates within the Finance, Legal, and Insurance sectors and is situated in the United States. The entity is cataloged as a ransomware victim within this threat-intelligence index, with the associated threat actor identified as Deadlock. This listing type indicates that the organization was impacted by ransomware activity, consistent with threats targeting sensitive financial, legal, and insurance data environments. The description avoids inventing specific incident details such as data stolen, record counts, ransom demands, or confirmed breach specifics, maintaining factual neutrality. slgjustice.com was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA id32088 View details | United States | Finance / Legal / Insurance | — | leaked | |
|
Family law firm, established 1995 by Victor A. Shaheen (†2025 - the General Assembly of Virginia honored him with a resolution; google it, it is touching). Now run by his three sons. 48 employees across four offices: Richmond, Midlothian, Virginia Beach, Newport News. What do they do? They close 150+ real estate transactions EVERY MONTH for some of the largest corporate relocation programs in America. When a Fortune-500 moves an employee to Virginia, this firm holds that employee's Social Security Number, bank wiring details, home address, family identities, and sometimes their medical clearance. They hold everyone's future in a shared folder. We now hold the folder. WHAT WE TOOK 36,788 files · 27GB · 21,789 fully read 67,000+ SSN patterns (their own dedup says 6,017 real people — we will let their customers decide which number to believe) EVIDENCE — SERIES PREVIEW (from their actual files) - S1 DEEDS WITH SOCIAL SECURITY NUMBERS File: "5053815 - Unsigned Deed.docx" (verbatim from their server): "***-**-XXXX B•••• H••• Social Security Number ***-**-XXXX J••••• H••• Social Security Number 10356 Ashburn Road, North Chesterfield, VA 23235" File: "Kelley 5042085 - DEED.docx": "PURCHASER(S): N••••• S••• SELLER'S NAME: S••• E. K•••• SS#: ***-**-XXXX ...including the withholding of twenty percent (20%) of the sales proceeds." ← FIRPTA: foreign sellers. IRS will want this list. We have it. Thousands of these. Every deed folder = a name, a number, an address, a transaction. Their client roster IS the leak. - S3 INSIDE THEIR BANKING & THEIR NETWORK File: "shared_Accounting/Banking/Other Banking/Shaheen DDA Statements SunTrust DDA" (email from SunTrustOnlineCourier to their own staff — headers verbatim): Received: from barracuda.shaheenlaw.com ([10.0.0.6]) by ricdcex1.shaheenlaw.com ... X-ASG-Debug-ID: 1291233029-... for ; Wed, 1 Dec 2010 Why we publish an email HEADER: their internal map is in it. Barracuda at 10.0.0.6. Exchange "ricdcex1". Domain SHAHEENWORLD. We did not forget how to enter. Neither will the next group, when we sell the map. 150 banking statement attachments ride along in this folder. - S5 THE CLIENT LIST, WRITTEN IN FOLDERNAMES They named folders after their customers. Verbatim paths: shared_PENDING_SALE/HENNY/Closed Files/ Wisniewski-Markel, Suzanne_5027384_12263 Eagle ... Merza, Jamal & Adrienne_5027826_811 Woodberry ... Name, file number, STREET ADDRESS — in the path itself. Marketing lists sell for money. This one is annotated with purchase history. Relocation buyers are premium leads. - S2 MEDICAL - S4 LITIGATION Held. 120 medical files exist (their own audit counted them). Litigation: we confirm their December escrow dispute is public (Porchlight Homes v. Almeida & Shaheen, Henrico — google it, BizSense covered it). Virginia residents: §18.2-186.6. Illinois relocations: BIPA. Opposing counsel and journalists: samples on request. Media & researchers: samples on request, we answer fast We keep our word to everyone who pays. We keep it also to everyone who does not. |
||||||
| Ransomware | FBC id32089 View details | South Africa | Retail / E-commerce | — | leaked | |
|
furnbed.co.za operates within the retail and e-commerce sector in South Africa, providing online commerce and related business services. As a digital commerce organization, it maintains customer-facing platforms, transaction infrastructure, and operational systems relevant to retail activity. The entity is cataloged in this threat-intelligence index as a ransomware victim associated with the threat actor Deadlock. This listing reflects the cybersecurity context in which furnbed.co.za was identified, without asserting unverified details regarding data exfiltration, ransom demands, or specific compromise mechanics. The designation serves to document the relationship between the organization, its sector, location, and the ransomware threat profile. |
||||||
| Ransomware | FBC id32089 View details | South Africa | Retail / E-commerce | — | leaked | |
|
Furniture Bargaining Council in South Africa. This is the tariff council for the furniture, mattress and upholstery industry.The platform serves employers and employees in the industry in regions such as Gauteng, North West, Mpumalanga, Limpopo and the Free State to handle legal and administrative processes. |
||||||
| Ransomware | JP Molyneux Studio id31867 View details | United Kingdom | — | — | leaked | |
|
JP Molyneux Studio Ltd showcases the exclusive work of internationally renowned interior designer Juan Pablo Molyneux. |
||||||
| Ransomware | UFOC id31875 View details | Taiwan, Province of China | — | — | leaked | |
|
United Fiber Optic Communication Inc. (UFOC) is an established, publicly traded telecommunications company from Taiwan. The company acts as a total solution provider for communication networks and specializes in the manufacture of fiber optic cables and the provision of integrated technological systems. |
||||||
| Ransomware | Global Terminal Services id31876 View details | Türkiye | — | — | leaked | |
|
GTS legally registered as Global Terminal Hizmetleri A.Ş. It is the largest independent storage terminal for liquid fuels and oil in the entire Mediterranean region. 470gb |
||||||
| Ransomware | LT Group / Fortune Tobacco Corp id31551 View details | Philippines | — | — | leaked | |
|
Amount: 27 GB | Files: 14,836 They ignored our messages for 72 hours.. Now we publish the details of the breach. Data leaked: 107 Passports (MRZ) 1,712 Bank Statements (PNB + Holco USD accounts) 212 Promissory Notes (Eton Properties, PHP 2.53B debt) 231 BIR/eFPS credentials Samples: Passport_Johnny_Tan.pdf Holco_USD_Statement.pdf Eton_Debt_212.pdf Full leak: August 18. Contact: Session ID provided in emails. Pay for the data or pay for its permanent deletion. Otherwise, the full dump will be public. |
||||||
| Ransomware | AHENK lab id31021 View details | Türkiye | IT | — | leaked | |
|
Ahenk Lab is a Turkish IT company that provides various services and solutions in the information technology sector. Located in Turkey, the company operates in the IT industry, offering its expertise and products to clients. Ahenk Lab is listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | AHENK lab id31021 View details | Türkiye | IT | — | leaked | |
|
Ahenk Laboratuvarı is an ISO 15189-accredited medical laboratory in Turkey, founded in 1998 and located in Istanbul-Şişli. The company offers services in clinical biochemistry, microbiology, pathology, and genetics, and collaborates with Limbach Laboratories in Germany. |
||||||
| Ransomware | DIATER id31011 View details | Spain | Healthcare / Pharma | — | leaked | |
|
Diater is a Spanish company operating in the healthcare and medicine sector, providing various services and offerings. The company is based in Spain and serves the local market with its healthcare solutions. Diater was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | DIATER id31011 View details | Spain | Healthcare / Pharma | — | leaked | |
|
(Laboratorio de Diagnóstico y Aplicaciones Terapéuticas, SA), a Spanish biopharmaceutical company founded in 1999 and headquartered in Madrid.The company specializes in the research, development and manufacture of products for allergy diagnostics and allergen immunotherapy (ASIT). |
||||||
| Ransomware | Pasello id31012 View details | United States | IT | — | leaked | |
|
Pasello is an IT company based in the United States, providing various services to its clients. As an IT sector entity, Pasello likely offers a range of technology-related solutions. Pasello was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | Pasello id31012 View details | United States | IT | — | leaked | |
|
Pasello Trattamenti Termici Srl , an Italian specialist company for the heat treatment of metal alloys. |
||||||
| Ransomware | Pasello id31012 View details | Italy | IT | — | leaked | |
|
Pasello Trattamenti Termici Srl , an Italian specialist company for the heat treatment of metal alloys. |
||||||
| Ransomware | Takis srl id31007 View details | Italy | Manufacturing / Engineering | — | leaked | |
|
Takis srl is an Italian company operating in the manufacturing and engineering sector. The company is based in Italy and provides various services and products related to its sector. Takis srl was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | Takis srl id31007 View details | Italy | Manufacturing / Engineering | — | leaked | |
|
Takis Biotech is an Italian biotechnology company founded in 2009 and headquartered in Rome. The company specializes in contract research (R&D services), preclinical immunology, and the development of genetic vaccines and therapeutic antibodies. |
||||||
| Ransomware | Hardware Asesorias Software Ltda id30967 View details | Chile | — | — | — | |
|
Hardware Asesorías Software Ltda (HAS Ltda) is a technology provider based in Bucaramanga, Colombia, specializing in the distribution of hardware and software licenses . The company acts as an official partner for brands such as Apple, Adobe, and HP, serving business customers, government agencies, and engineering firms. |
||||||
| Ransomware | Tesco Engineer id30968 View details | United Kingdom | — | — | — | |
|
Tesco Engineer Co., Ltd. is a Thai construction and manufacturing company based in Bangkok, operating in civil engineering and industrial pipe manufacturing since 1976. |
||||||
| Ransomware | High Class Car Limo id30931 View details | United States | Transportation / Travel / Logistics | — | — | |
|
Highclasscarlimo.com is a US-based company operating in the transportation sector, specifically providing limousine services. The company caters to the travel and logistics needs of its clients. Highclasscarlimo.com was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | High Class Car Limo id30931 View details | United States | Transportation / Travel / Logistics | — | — | |
|
High Class Limousine & Car Service Corp. is a licensed private passenger transportation service in New York City, founded in 1995, specializing in non-emergency medical transportation . The company provides rides to medical appointments, dialysis sessions, and rehabilitation facilities, and has locations in Manhattan and the Bronx. |
||||||
| Ransomware | West African Resources ltd id30934 View details | Australia | — | — | — | |
|
West African Resources Limited (ASX: WAF) isan Australia-based, mid-tier gold mining and exploration companywith its primary operations located in Burkina Faso, West Africa . Founded in 2006, the company is headquartered in Subiaco, Western Australia, and focuses on the acquisition, development, and mineral processing of high-grade gold assets. |
||||||
| Ransomware | Caspian One id30935 View details | Azerbaijan | — | — | — | |
|
Caspian One is an international provider of IT services and specialist talent for industries such as FinTech investment banking and broadcasting. Based in England the company offers professional recruitment and managed technology solutions and operates in Europe and North America. |
||||||
| Ransomware | Schaad, Balass, Menzl and Partner AG id30849 View details | Switzerland | Other | — | ||
|
sbmp.ch is an entity based in Switzerland, operating in the other sector. The organization provides various offerings, but specific details are not available. sbmp.ch was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | Schaad, Balass, Menzl and Partner AG id30860 View details | Switzerland | Other | — | ||
|
sbmp.ch is an entity based in Switzerland, operating in the other sector. The entity provides various offerings, but specific details are not available. sbmp.ch was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | Schaad, Balass, Menzl and Partner AG id30860 View details | Switzerland | Other | — | ||
|
SBMP (Schaad Balass Menzl & Partner AG) is a specialized Swiss IP boutique with offices in Zurich and Winterthur, offering comprehensive services in patent law, trademark law, and design protection. With over 50 years of experience and a team of lawyers and technical experts, the firm supports companies across all industries, from filing to enforcement. |
||||||
| Ransomware | HİDROMEK id30850 View details | Türkiye | Manufacturing / Engineering | pending | ||
|
Hidromek is a Turkey-based company operating in the manufacturing and engineering sector, producing heavy equipment and machinery. The company offers a range of products and services to its customers. Hidromek was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | HİDROMEK id30861 View details | Türkiye | Manufacturing / Engineering | pending | ||
|
Hidromek is a Turkey-based company operating in the manufacturing and engineering sector, offering various products and services. The company is involved in the production of heavy machinery and equipment. Hidromek was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | HİDROMEK id30861 View details | Türkiye | Manufacturing / Engineering | pending | ||
|
HİDROMEK is a leading Turkish manufacturer of heavy construction machinery recognized globally for its high-performance award-winning heavy equipment. Founded in Ankara in 1978 by mechanical engineer Hasan Basri Bozkurt the company operates six state-of-the-art production facilities across Turkey and Thailand. Its heavy machinery operates in more than 130 countries spanning six continents. Over 880 gigabytes of sensitive internal data were stolen from this company |
||||||
| Ransomware | KEMEK id30851 View details | Poland | Manufacturing / Engineering | pending | ||
|
Kemek.eu is a company based in Poland, operating in the manufacturing and engineering sector. The company likely provides various services and products related to its sector, although specific details are not available. Kemek.eu was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | KEMEK id30862 View details | Lithuania | Manufacturing / Engineering | pending | ||
|
Kemek.eu is a company based in Lithuania, operating in the manufacturing and engineering sector. The company likely provides various services and products related to its sector, although specific details are not available. Kemek.eu was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | KEMEK id30862 View details | Lithuania | Manufacturing / Engineering | pending | ||
|
KEMEK Engineering a leading technology and automation company in the Baltics The company was founded in 1995 and develops customized solutions for industrial companies. |
||||||
| Ransomware | KeNHA id30852 View details | Kenya | Public Sector | pending | ||
|
Kenha.co.ke is a Kenyan public sector organization. The entity operates in the public sector in Kenya. Kenha.co.ke was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | KeNHA id30852 View details | Kenya | Public Sector | pending | ||
|
The Kenya National Highways Authority (KeNHA) agency responsible for the construction, management, and maintenance of national highways (classes S, A, and B) in Kenya. |
||||||
| Ransomware | BioResearch id30853 View details | Poland | Healthcare / Pharma | leaked | ||
|
Bioresearch.pl is a Polish organization operating in the healthcare and pharmaceutical sector. The company is involved in biomedical research and related activities. Bioresearch.pl was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | BioResearch id30853 View details | Poland | Healthcare / Pharma | leaked | ||
|
BioResearch Group to Warsaw clinical research center specializing in early phases (I, FIH, SAD, MAD) and bioequivalence studiesThe company offers comprehensive services for the pharmaceutical and CRO sectors, with its own clinic and laboratory. |
||||||
| Ransomware | Relesa id30854 View details | Argentina | Retail / E-commerce | pending | ||
|
Relesa.com.ar operates in the retail and e-commerce sector in Argentina, providing various products and services to customers. As an e-commerce platform, it likely offers online shopping experiences. Relesa.com.ar was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | Relesa id30854 View details | Argentina | Retail / E-commerce | pending | ||
|
Grupo Relesa a multinacional Spanish company specializing in the fabrication and summary of rejillas metálicas (tramex). The main function is the digital platform and the client portal of Reginald Lee SA, one of the official distributors of more important products of Coca-Cola in Argentina. |
||||||
| Ransomware | Carrier AB id30855 View details | Sweden | Manufacturing / Engineering | pending | ||
|
Carrier SE is a company based in Sweden, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Carrier SE was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | Carrier AB id30855 View details | Sweden | Manufacturing / Engineering | pending | ||
|
Carrier Transport AB a Swedish transport and logistics company headquartered in Jordbro near Stockholm. |
||||||
| Ransomware | Enedo Power id30856 View details | Finland | Energy | pending | ||
|
Enedopower.com is an energy sector company based in Finland, providing various energy-related services. The company operates in the energy sector, offering services to customers in Finland. Enedopower.com was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | Enedo Power id30856 View details | Finland | Energy | pending | ||
|
Enedo Power (company renamed Inission Power) develops high-quality, intelligent power supply systems for critical infrastructure and industrial applications. The company, part of the Swedish Inission Group with Finnish roots, focuses on robust power supplies, power systems, and LED drivers for industries such as defense and railway technology. |
||||||
| Ransomware | CNA id30857 View details | Italy | Services | pending | ||
|
Toscana Centro CNA IT operates in the services sector in Italy, providing various offerings to its clients. As a part of the CNA network, it likely engages in activities supporting local businesses and communities. Toscana Centro CNA IT was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | CNA id30857 View details | Italy | Services | pending | ||
|
CNA Toscana Centro a trade association that provides services and protection to artisans and businesses in the provinces of Prato and Pistoia. The portal manages union representation, tax services, the EPASA-ITACO welfare association, and supports business development and digitalization. |
||||||
| Ransomware | Vinilon id30858 View details | Chile | Manufacturing / Engineering | — | — | |
|
Vinilon.com is a Chilean company operating in the manufacturing and engineering sector, providing various products and services. The company is based in Chile and caters to the local market. Vinilon.com was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | Vinilon id30858 View details | Chile | Manufacturing / Engineering | — | — | |
|
Vinilon Group one of the leading manufacturers and distributors of pipe systems in Indonesia. |
||||||
| Ransomware | Aldaco Avance 2022 S.L. id30507 View details | Spain | Construction / Real Estate | — | — | |
|
Aldacogrupoavance.es is a Spanish company operating in the construction and real estate sector, providing various services to clients in Spain. The company's offerings likely include construction management, property development, and real estate consulting. Aldacogrupoavance.es was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | Aldaco Avance 2022 S.L. id30507 View details | Spain | Construction / Real Estate | — | — | |
|
Aldaco is a Spanish company specializing in industrial engineering, construction materials, civil engineering, mining and labor security, with seats in Asturias, Galicia and Madrid. The company distributes machines and technical tools, offers specialized asesoramients and support for professional projects. |
||||||
| Ransomware | Catcorp id30421 View details | Other | — | — | ||
|
Catcorp is a company operating in the other sector, providing various offerings to its customers. The company's specific location and details about its operations are not publicly known. Catcorp was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | Catcorp id30421 View details | Other | — | — | ||
|
Business direction: Mew mew |
||||||
| Ransomware | Weinberg ''93 Építő Kft. id30422 View details | Hungary | Other | — | ||
|
Weinberg.hu is a Hungarian entity operating in the Other sector. The company is based in Hungary and provides various offerings. Weinberg.hu was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | Weinberg ''93 Építő Kft. id30422 View details | Hungary | Other | — | ||
|
Weinberg ''93 Építő Kft., a prominent Hungarian construction and steel fabrication company. Overview: Founded in 1993 and headquartered in Sбrospatak, it is a 100% privately owned Hungarian company. Core Services: The firm specializes in general contracting and the manufacture of complex steel structures. Major Projects: They have handled significant industrial developments, including: - Volvo Trucks Hungary: Completed a 5,500 mІ advanced truck center in Ecser. - Continental Automotive: Construction of electronics manufacturing plants. - East Gate PRO Business Park: Developed BREEAM-certified sustainable warehouses. - Becton Dickinson: Expansion of a major syringe factory in Hungary. Recognitions: The company has received numerous awards, such as the Lechner Цdцn Award (2024) and the Steel Structure Award (2022). Over 650 gigabytes of sensitive internal data were stolen from this company: all commercial information about contractors, information about specialized construction technologies and metal structure production, internal financial transactions, and operations demonstrating corruption in construction projects. We invite all journalists, lawyers, and law enforcement agencies to review this information. |
||||||
| Ransomware | The Morton Grove Park District id30423 View details | United States | Services | — | ||
|
Mortongroveparks.com is a website associated with the Morton Grove Park District in the United States, providing various park and recreational services to the community. The park district offers a range of facilities, programs, and activities for residents and visitors. Mortongroveparks.com was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | The Morton Grove Park District id30423 View details | United States | Services | — | ||
|
The Morton Grove Park District (MGPD) is a separate municipal agency established in 1951, governed by five elected commissioners and subject to Illinois state laws. Their motto is: Everyone who lives in, works in, or visits Morton Grove has constitutional rights, no matter their citizenship or immigration status. The Village is committed to making sure every person feels safe, supported, and respected. More than 50 GB of data containing personal and sensitive information belonging to both internal employees and the organization's clients and suppliers. Documents on financial plans and internal policies are protected by a non-disclosure policy. (Including racist and sexist insights) We invite all journalists, lawyers, and law enforcement agencies to review this information. |
||||||
| Ransomware | LA SEVILLANITA SRL id30424 View details | Argentina | Retail / E-commerce | — | ||
|
Lasevillanita-online.com is an e-commerce platform based in Argentina, operating in the retail sector. The company provides online shopping services to its customers. Lasevillanita-online.com was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | LA SEVILLANITA SRL id30424 View details | Argentina | Retail / E-commerce | — | ||
|
LA SEVILLANITA is the leading transport company in Argentina. |
||||||
| Ransomware | Schlenker and Cantwell, P.A. id30425 View details | United States | IT | — | ||
|
Cpasch.com is an IT company based in the United States, providing various IT services. The company operates in the IT sector, offering services to clients in the US. Cpasch.com was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | Schlenker and Cantwell, P.A. id30425 View details | United States | IT | — | ||
|
Schlenker & Cantwell, P.A. is a certified public accounting firm based in the USA, offering services such as tax preparation and planning, auditing and assurance, bookkeeping, payroll, financial reporting, consulting, and estate-trust management. |
||||||
| Ransomware | WiBeats S.r.l. id30426 View details | Italy | IT | — | ||
|
Wibeats is an Italian IT company operating in the information technology sector. The company is based in Italy and provides various IT services. Wibeats was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | WiBeats S.r.l. id30426 View details | Italy | IT | — | ||
|
WIBEATS is one among the last few independent Italian Asset Management and Loans Service group, specialised performing and non performing real estate. Over 150 gigabytes of internal email datastore were stolen from this company. more than 50 GB of internal sensitive data containing contracts and official papers containing construction and renewal permits |
||||||
| Ransomware | Grupo Vanguardia id30427 View details | Mexico | Construction / Real Estate | — | ||
|
Grupovanguardia.com is a company based in Mexico that operates in the construction and real estate sector. The company likely provides various services related to construction and property development. Grupovanguardia.com was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | Grupo Vanguardia id30427 View details | Mexico | Construction / Real Estate | — | ||
|
Grupo Vanguardia is an automotive group |
||||||
| Ransomware | WH Müller id30428 View details | Germany | Education | — | ||
|
www.whm.de is an online presence in the education sector, located in Germany. The entity likely provides educational resources or services. www.whm.de was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | WH Müller id30428 View details | Germany | Education | — | ||
|
WH Müller is a family business in the field of electrical engineering and IT technology. |
||||||
| Ransomware | DOCTUS USA Inc id30429 View details | United States | Healthcare / Pharma | — | ||
|
Doctususa.com is a US-based company operating in the healthcare sector, providing medical services and solutions. The company is located in the United States and offers various healthcare-related offerings. Doctususa.com was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | DOCTUS USA Inc id30429 View details | United States | Healthcare / Pharma | — | ||
|
Doctus offers top-tier medical records services in the USA, specializing in the management and organization of medical documentation. |
||||||
| Ransomware | ACU - The Automobile Club of Uruguay id30430 View details | Uruguay | NGOs / Associations | — | ||
|
Acu.com.uy is a website associated with a non-governmental organization in Uruguay, providing information and services to its members and the community. As an NGO, acu.com.uy likely focuses on various social causes and initiatives. Acu.com.uy was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | ACU - The Automobile Club of Uruguay id30430 View details | Uruguay | NGOs / Associations | — | ||
|
[AI generated] The Automobile Club of Uruguay (ACU) is a nonprofit organization based in Uruguay that provides services to motorists and travelers. It offers roadside assistance, vehicle inspections, travel planning, and tourism-related services. Operating within the automotive services and transportation industry, ACU also promotes road safety and mobility across Uruguay. It maintains affiliations with international automobile club networks, extending member benefits abroad. |
||||||
| Ransomware | CIATI id30431 View details | Argentina | IT | — | ||
|
ciati.com.ar is an Argentine IT company providing various services. The company operates in the IT sector, offering solutions to clients in Argentina. ciati.com.ar was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | CIATI id30431 View details | Argentina | IT | — | ||
|
CIATI is a technology center dedicated to providing analytical services, technical assistance, and research and development for the food, geochemistry, and environmental industries. |
||||||
| Ransomware | Quetzal Química id30432 View details | Mexico | Manufacturing / Engineering | — | ||
|
Quetzalquimica.com is a company based in Mexico, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Quetzalquimica.com was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | Quetzal Química id30432 View details | Mexico | Manufacturing / Engineering | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | Abhay Prabhavana id30433 View details | India | NGOs / Associations | — | ||
|
Abhayprabhavana.org is an Indian non-governmental organization operating in the country. The organization is involved in various activities, although specific details about its offerings are not readily available. Abhayprabhavana.org was listed as a ransomware victim associated with Deadlock. |
||||||
| Ransomware | Abhay Prabhavana id30433 View details | India | NGOs / Associations | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | Güven Mühendislik Makina id30434 View details | Türkiye | Manufacturing / Engineering | — | ||
|
Gmm.com.tr is a Turkish company operating in the manufacturing and engineering sector. The company is based in Turkey and provides various offerings related to its sector. Gmm.com.tr was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | Güven Mühendislik Makina id30434 View details | Türkiye | Manufacturing / Engineering | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | 3Gi Solutions, is an IT Services Provider located in Montreal, Quebec. id30435 View details | Canada | IT | — | ||
|
3GISolutions is an IT company based in Canada, providing various IT services. The company operates in the IT sector, offering solutions to its clients. 3GISolutions was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | 3Gi Solutions, is an IT Services Provider located in Montreal, Quebec. id30435 View details | Canada | IT | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | Werken Química Brasil S.A. id30436 View details | Brazil | IT | — | ||
|
Werken.com.br is a Brazilian company operating in the IT sector, providing various services to its clients. The company is based in Brazil and offers a range of IT solutions. Werken.com.br was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | Werken Química Brasil S.A. id30436 View details | Brazil | IT | — | ||
|
Werken Química Brasil S.A. is a company specializing in the development and supply of chemical products, headquartered in Indaial, Santa Catarina. It operates primarily within the textile industry, offering solutions for pretreatment, dyeing, printing, yarn lubrication, and effluent treatment, with a focus on functional technologies. |
||||||
| Ransomware | Židlochovice city id30437 View details | Czechia | Public Sector | pending | ||
|
Zidlochovice.cz is a municipal website for the town of Zidlochovice in the Czech Republic, providing information on local services, news, and events. As a public sector entity, it serves the local community by offering various resources and updates. Zidlochovice.cz was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | Židlochovice city id30437 View details | Czechia | Public Sector | pending | ||
|
Internal city administration documents have been leaked. Personal data from the database will be sold on darknet forums. Mayor 'Jan Vitula' claims the attack was prevented and no data was stolen. An investigation has been launched with the police, and countermeasures are being taken. =) xD In press: https://www.denik.cz/regiony/zidlochovice-hackeri-kyberneticky-utok-vykupne-data-software-ransomware-kldr.html https://www.irozhlas.cz/zpravy-domov/poslete-bitcoiny-nebo-vas-nepustime-k-datum-urad-v-zidlochovicich-zjistuje-skody_2603172012_bva https://www.***.cz/cs/aktuality/dulezite-upozorneni-mimoradne-uzavreni-meu.html Over 150 gigabytes of internal data |
||||||
| Ransomware | BARCELONA URBAN PROPERTY CHAMBER id30438 View details | Spain | IT | — | ||
|
cpubcn.com is an IT company based in Spain, providing various IT services. The company operates in the IT sector, offering services to clients in the region. cpubcn.com was listed as a ransomware victim associated with Deadlock |
||||||
| Ransomware | BARCELONA URBAN PROPERTY CHAMBER id30438 View details | Spain | IT | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | Optimal Care SA id30439 View details | Argentina | — | — | ||
|
Optimal Care Sociedad Anonima manufactures cleaning applications. The Company offers wet wipes for personal care, baby wipes, make-up remover, multipurpose wipes, and cleaning applications. Optimal Care serves customers in Spain. |
||||||
| Ransomware | Anidaport - Investimentos Imobiliários Lda., Lisbon, Portugal id30440 View details | Portugal | — | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | LIVISTO id30441 View details | Poland | — | — | ||
|
LIVISTO is an international pharmaceutical company with extensive experience in the veterinary market. |
||||||
| Ransomware | Industrie Tecnologiche it id30442 View details | Italy | — | — | ||
|
Industrie Tecnologiche is a software development center for the food industry. |
||||||
| Ransomware | VBW Makelaars and Taxateurs id30443 View details | Netherlands | NGOs / Associations | — | ||
|
VBW Makelaars & Taxateurs specializes in real estate and property valuations in the Netherlands. Real estate agency and certified appraisers |
||||||
| Ransomware | Eko-Flor Plus d.o.o. id30444 View details | Croatia | — | — | ||
|
Eko-Flor Plus d.o.o. is the largest private waste management company in Croatia. Headquartered in Oroslavje, the company specializes in collecting, sorting, and processing municipal and non-hazardous waste. |
||||||
| Ransomware | Zaffrani Srl id30445 View details | Italy | — | — | ||
|
Zaffrani Srl, an Italian manufacturer specializing in advanced agricultural machinery. Founded in 1959, the company is headquartered in the Marche region of Italy and has become a global leader in crop harvesting and drying technology. |
||||||
| Ransomware | Grupo Mercurio id30446 View details | Mexico | — | — | ||
|
Grupo Mercurio is a leading Mexican business conglomerate primarily recognized for its dominance in the bicycle and sports industry. Based in San Luis Potosí, the group operates one of the largest bicycle manufacturing plants in Mexico. |
||||||
| Ransomware | Maxplast AND Senoco id30447 View details | Türkiye | — | — | ||
|
Senoco Tekstil Sanayi ve Ticaret A.Ş., a Turkish company specializing in the production of nonwoven fabrics. Maxplast is a Turkish manufacturing company based in Gaziantep that specializes in plastic packaging and houseware solutions. Founded in 2016, the company produces a wide range of PET and PE containers for various industries, including food, cosmetics, agriculture, and chemistry. https://www.maxplast.com.tr/ |
||||||
| Ransomware | Gerusia S.L. id30448 View details | Spain | — | — | ||
|
Gerusia S.L., a Spanish service company headquartered in Oviedo, Asturias. Founded in 1995 and managed by women, the company provides a wide range of cleaning, auxiliary, and social-sanitary services for both public and private sectors throughout the Asturias region. |
||||||
| Ransomware | Elmoris id30449 View details | Lithuania | — | — | ||
|
Founded in 1996 in Vilnius, Lithuania, UAB Elmoris is a major manufacturer specializing in light metal packaging and "twist-off" lug caps for the food industry. The company is noted for producing PVC-free, environmentally friendly caps and providing metal printing services, holding AEO certification for international trade. |
||||||
| Ransomware | ONE Contact id30450 View details | Sweden | — | — | ||
|
ONE Contact is a Swedish-managed contact center located in Barcelona, Spain, offering customer service, telemarketing, and retention strategies targeted at the Scandinavian market. Services include 1st/2nd line support and digital customer service solutions, with a physical office located on Calle Padilla in Barcelona. |
||||||
| Ransomware | Consulting Valladolid id30451 View details | Spain | — | — | ||
|
Consulting Valladolid S.A. is a professional firm with over 40 years of experience providing comprehensive legal, tax, labor, and accounting services in Valladolid, Spain. The firm utilizes advanced technology to deliver tailored advisory solutions for both companies and individuals |
||||||
| Ransomware | ADM Value Barcelona id30452 View details | Spain | — | — | ||
|
ADM Value is a leading international company specializing in outsourced customer relationship management (CRM) and Business Process Outsourcing (BPO) |
||||||
| Ransomware | Ring Textile Production RTP SRL id30453 View details | — | — | |||
|
rtpbz.ro is the official domain for Ring Textile Production RTP SRL, a Romanian textile manufacturing company based in Buzău. Industry: Manufacture of outerwear and tricot clothing, specializing in women's nightwear, underwear, and cotton/linen apparel. |
||||||
| Ransomware | Bombas Ideal id30454 View details | Brazil | — | — | ||
|
Bombas Ideal is a Spanish manufacturer established in 1902 specializing in water pumps and pressure systems for agricultural, industrial, and fire protection applications. Based in Valencia, the company offers a range of vertical, submerged, and solar pumping solutions with international operations. |
||||||