Interlock is a ransomware group first observed in September 2024 that targets critical infrastructure sectors including healthcare, government, education, and technology across North America and Europe using double-extortion, with 57+ claimed victims including a major US dialysis provider exposing over two million patient records.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Para detección/bloqueo en tu EDR/SIEM. Fuente: ransomware.live.
Action Required: Data Breach Notification Your Data Is Now Beyond Your Control We have taken control of your systems, encrypted your critical files, and extracted sensitive data. This is a pivotal moment for your organization—your actions now will determine the outcome. --- What You Need to Understand Your data security was compromised because of insufficient protection. As a result: 1. All access to important files has been restricted through encryption. 2. We possess confidential business records, personal data, and other critical information. 3. If you do not respond within 72 hours, we will initiate the public release of your data, creating irreversible damage. --- The Risks You Face: Failure to act swiftly puts your organization at risk of: - Legal violations under GDPR, GLBA, CCPA, HIPAA, NYDFS Cybersecurity Regulation, and DPA 2018. - Financial penalties for failing to protect Non-Public Information (NPI). - Reputational harm as clients, partners, and the public lose trust in your ability to safeguard their data. --- What You Must Do Immediately: 1. Initiate Communication: - Access our recovery portal using TOR Browser. - Download TOR from [[redactado] - Visit [redactado] using your Organization ID [snip] to start the negotiation process. 2. Alternative Browser Access: - Use Chrome, Edge, or Firefox to open [redactado] - Enter your Organization ID [snip] to receive detailed recovery instructions. --- What Happens Next: - If we do not hear from you within 72 hours, your data will be exposed to the public and sold to interested parties. - The ensuing violations of laws such as GDPR and HIPAA will lead to significant penalties, lawsuits, and regulatory scrutiny. --- Your Responsibility: Your organization is fully accountable for protecting the data it collects. By neglecting this responsibility, you have allowed this situation to unfold. Your chance to regain control is limited—act decisively to avoid catastrophic outcomes.
As a school, Shalom Christian Academy is legally and ethically obligated to maintain a wide range of confidential information. However, they are grossly negligent in protecting their own security and that of their students and staff. Consequently, we provide you with student grades, disciplinary and special education records, health and immunization records, financial aid and tuition information, donation history, employee background checks, salary data, and internal security documents. This leak into the public domain constitutes an unacceptable betrayal that can lead to identity theft, financial fraud, extortion, harassment, and devastating harm to children and families. The school is culpable for this act and must be held accountable to the fullest extent of the law.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Shalom Christian Academy | US | Education | — | 9 oct 2026 |
| Riviera Healthcare Center | US | Healthcare | — | 7 oct 2026 |
| H&L Manufacturing | Manufacturing | — | 5 oct 2026 | |
| O2 Dental Group | US | Healthcare | — | 5 oct 2026 |
| Blaise C. Bender, PC | US | Professional Services | — | 30 sept 2026 |
| Tekko Enterprises, Inc | US | Not Found | — | 29 sept 2026 |
| The Center for Kidney Care | US | Healthcare | — | 28 sept 2026 |
| NFM Lending | US | Financial Services | — | 7 sept 2026 |
| Super Systems Inc | US | Technology | — | 31 ago 2026 |
| Connell Enterprises LLC | US | Other | — | 14 ago 2026 |
| AngMar Companies | Not Found | — | 11 ago 2026 | |
| Gardiner Family Chiropractic | US | Healthcare | — | 31 jul 2026 |
| Centre for Newcomers | CA | Public Sector | — | 17 jul 2026 |
| Paragon Store Fixtures | US | Manufacturing | — | 17 jul 2026 |
| Converting Equipment International | US | Manufacturing | — | 16 jul 2026 |
| Borger ISD | US | Education | — | 10 jul 2026 |
| YMCA of Western North Carolina | US | Consumer Services | — | 7 jul 2026 |
| Clearview Eye Centre | CA | Healthcare | — | 25 jun 2026 |
| Cold Front Distribution | US | Transportation/Logistics | — | 2 jun 2026 |
| Milano | MX | Retail & E-Commerce | — | 13 mar 2025 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
Riviera Healthcare Center is a for-profit skilled nursing facility in operation for over 50 years. It provides 24-hour nursing and rehabilitation services. Due to negligence and poor security practices, confidential data was exposed, including patient protected health information (PHI)names, diagnoses, medical histories, fall/fracture and treatment information, payment records, and employee/HR data. This breach violates HIPAA and the California CMIA (and potentially the CCPA/CPRA) and will result in mandatory breach notification, federal and state fines, civil lawsuits, corrective action plans, and significant reputational and financial damage.
H&L Manufacturing is a contract manufacturer serving various industries, including automotive, consumer goods, and transportation. However, due to negligence, H&L filesnon-disclosure agreements, CAD models, material specifications, quotes, prototypes, 3D printing data, process specifications, quality control records, supplier and employee datawere compromised and are now publicly available. These files represent commercially valuable assets and confidential intellectual property. This leak, which the company is unwilling to address, allows competitors to copy its work, undercut tender prices, lure customers, provoke lawsuits and fines, and damage its reputation, draining the company's resources.
O2 Dental Group of Wilmington makes your dental care easy by providing a variety of family dentistry services under one roof! As a dental provider, O2 Dental Group is subject to strict privacy protections, primarily the Health Insurance Portability and Accountability Act (HIPAA) in the United States, but they have not complied with security measures, resulting in compromised patient health records (PHI), billing and insurance documents, consent and authorization forms.
The law firm of Blaise C. Bender, PC handles confidential client tax records/working papers, mergers and acquisitions (M&A) and transaction agreements, estate/trust documents, corporate management records, and confidential attorney-client communications, and fails to maintain security. Due to this negligent mishandling, we disclose confidential information that will subject Blaise C. Bender, PC to disciplinary action by the Bar/CPA, penalties under Section 7216 of the Internal Revenue Code and the Texas Privacy Act, civil claims for professional negligence/breach of fiduciary duty/breach of contract, and serious damage to our reputation and clients.
Tekko Enterprises, Inc., a Tooele, Utah-based prime contractor with a U.S. Air Force contract at Mountain Home Air Force Base (worth over $5 million), an $829,227 U.S. Army Corps of Engineers contract for cranes in Sacramento, and recent projects in Jacob City ($1.21 million), DFCM ($3.5 million), and the Youth Center Boiler House ($138,000), as a result of security negligence, leaked confidential information, including drawings/diagrams/specifications for utility systems (fuel systems, HVAC systems), cranes, employee personal and identifying information, security clearances/ID cards, confidential bids/estimates, and contract prices/financials, in violation of the False Claims Act, DFARS, FISMA, and the Privacy Act.