blacklock
First seen May 16, 2025Active64 claimed victims
The claims below are reproduced as posted by blacklock on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
BlackLock is a rebranded version of another ransomware group known as Eldorado. It has since become one of the most active extortion syndicates in 2025, heavily targeting technology, manufacturing, construction, finance, and retail sectors.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Oxford Universal Corp | July 2, 2025 | ransomware_live | — |
| NK Customer Solutions | June 29, 2025 | ransomware_live | — |
| Ubon Ratchathani University | June 26, 2025 | ransomware_live | — |
| Olivera Canarias | June 24, 2025 | ransomware_live | — |
| Ryan Harvie McEnery | June 5, 2025 | ransomware_live | — |
| Lumenation | June 3, 2025 | ransomware_live | — |
| Solar City | June 3, 2025 | ransomware_live | — |
| Navesink Rehab | June 3, 2025 | ransomware_live | — |
| Solar City Tyre Service | June 3, 2025 | ransomware_live | — |
| Riverdell Construction | June 2, 2025 | ransomware_live | — |
| MCM Construction | May 30, 2025 | ransomware_live | — |
| Neurosurgeons | May 28, 2025 | ransomware_live | — |
| Quick Frames USA | May 28, 2025 | ransomware_live | — |
| Lac La Biche Transport | May 27, 2025 | ransomware_live | — |
| Reliance Heating | May 25, 2025 | ransomware_live | — |
| TOHO CO., LTD. | May 16, 2025 | ransomware_live | — |
| Rees NDT Inspection Services | January 24, 2025 | ransomware_live | — |
| EVAS Group | January 10, 2025 | ransomware_live | — |
| HIDROCARBUROS ARGENTINOS S.A. | January 4, 2025 | ransomware_live | — |
| Inventory Management and Counting Solutions | January 4, 2025 | ransomware_live | — |
| D&G Enviro-Group | December 28, 2024 | ransomware_live | — |
| Relate Infotech | December 24, 2024 | ransomware_live | — |
| Akantha | December 23, 2024 | ransomware_live | — |
| Acumen Group | December 16, 2024 | ransomware_live | — |
| Light Speed Design | December 14, 2024 | ransomware_live | — |
| Kandelaar Electrotechniek | December 14, 2024 | ransomware_live | — |
| First Baptist Church | December 14, 2024 | ransomware_live | — |
| Midland Turbo | December 14, 2024 | ransomware_live | — |
| Tiendas Carrion & Fernandez | November 18, 2024 | ransomware_live | — |
| Bells Tax Service | November 18, 2024 | ransomware_live | — |
| PC AfterHours | November 18, 2024 | ransomware_live | — |
| The PHOENIX | November 18, 2024 | ransomware_live | — |
| The Municipal Administration of Barranquitas and its Department of Finance | November 18, 2024 | ransomware_live | — |
| Keizer's Collision CSN & Automotive | November 18, 2024 | ransomware_live | — |
| Compra LTD Aruba | November 18, 2024 | ransomware_live | — |
| Business Systems House FZ-LLC | November 18, 2024 | ransomware_live | — |
| GC Custom Metal Fabricationsoon | November 18, 2024 | ransomware_live | — |
| Data Campos Sistemas | November 18, 2024 | ransomware_live | — |
| Cucina Tagliani | November 18, 2024 | ransomware_live | — |
| Mullen Wylie, LLC | November 18, 2024 | ransomware_live | — |
| Patrick Sanders and Company, P.C. | November 18, 2024 | ransomware_live | — |
| Pensacola | November 18, 2024 | ransomware_live | — |
| A-1 Mobile Lock & Key | November 18, 2024 | ransomware_live | — |
| Adams Homes | November 18, 2024 | ransomware_live | — |
| ANKERSKA PLOVIDBA d.d. | November 18, 2024 | ransomware_live | — |
| Panzer Solutions LLC Business Services | November 18, 2024 | ransomware_live | — |
| CelPlan Technologies, Inc. | November 18, 2024 | ransomware_live | — |
| Alliance Industries, LLC. | November 18, 2024 | ransomware_live | — |
| A & L Auto Recyclers | November 18, 2024 | ransomware_live | — |
| BUROTEC S.A. | November 18, 2024 | ransomware_live | — |
| Kennedy Funding | November 18, 2024 | ransomware_live | — |
| Gough Construction | November 18, 2024 | ransomware_live | — |
| LINDOSTAR | November 18, 2024 | ransomware_live | — |
| Premier Packaging | November 18, 2024 | ransomware_live | — |
| TBM Consulting Group, Inc. | November 18, 2024 | ransomware_live | — |
| UCC Retrievals, Inc. | November 18, 2024 | ransomware_live | — |
| K-State College of Veterinary Medicine | November 18, 2024 | ransomware_live | — |
| ATD-American | November 18, 2024 | ransomware_live | — |
| Fleet Equipment Center, Inc. | November 18, 2024 | ransomware_live | — |
| LA LUCKY Brand | November 1, 2024 | ransomware_live | — |
| New River Electrical Corporation | September 19, 2024 | ransomware_live | — |
| Nations Homes Commercial & Residential Construction South Carolina, United States | September 6, 2024 | ransomware_live | — |
| avioesforza.it | December 7, 2023 | ransomware_live | — |
| HTE Technologies | November 27, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).