ElDorado
First seen June 6, 2024Active112 claimed victims
The claims below are reproduced as posted by ElDorado on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
In September The El Dorado ransomware group have been rebrand as BlackLock
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Rees NDT Inspection Services | January 22, 2025 | ransomware_live | — |
| EVAS Group | January 10, 2025 | ransomware_live | — |
| Perú Controls S.A.C. | January 4, 2025 | ransomware_live | — |
| HIDROCARBUROS ARGENTINOS S.A. | January 4, 2025 | ransomware_live | — |
| Inventory Management and Counting Solutions | January 4, 2025 | ransomware_live | — |
| D&G Enviro-Group | December 28, 2024 | ransomware_live | — |
| Relate Infotech | December 24, 2024 | ransomware_live | — |
| Akantha | December 23, 2024 | ransomware_live | — |
| LaSen | December 16, 2024 | ransomware_live | — |
| Acumen Group | December 16, 2024 | ransomware_live | — |
| Light Speed Design | December 14, 2024 | ransomware_live | — |
| Kandelaar Electrotechniek | December 14, 2024 | ransomware_live | — |
| First Baptist Church | December 14, 2024 | ransomware_live | — |
| Midland Turbo | December 14, 2024 | ransomware_live | — |
| Tiendas Carrion & Fernandez | November 18, 2024 | ransomware_live | — |
| Bells Tax Service | November 18, 2024 | ransomware_live | — |
| The PHOENIX | November 18, 2024 | ransomware_live | — |
| The Municipal Administration of Barranquitas and its Department of Finance | November 18, 2024 | ransomware_live | — |
| Keizer's Collision CSN & Automotive | November 18, 2024 | ransomware_live | — |
| Minuteman Press | November 18, 2024 | ransomware_live | — |
| Compra LTD Aruba | November 18, 2024 | ransomware_live | — |
| Aberdeen | November 18, 2024 | ransomware_live | — |
| Business Systems House FZ-LLC | November 18, 2024 | ransomware_live | — |
| GC Custom Metal Fabricationsoon | November 18, 2024 | ransomware_live | — |
| Data Campos Sistemas | November 18, 2024 | ransomware_live | — |
| Cucina Tagliani | November 18, 2024 | ransomware_live | — |
| Cmc Construction Material | November 18, 2024 | ransomware_live | — |
| Mullen Wylie, LLC | November 18, 2024 | ransomware_live | — |
| Think Simple | November 18, 2024 | ransomware_live | — |
| Pensacola | November 18, 2024 | ransomware_live | — |
| CURVC Corp | November 18, 2024 | ransomware_live | — |
| A-1 Mobile Lock & Key | November 18, 2024 | ransomware_live | — |
| Istituto di Istruzione Superiore "Giulio Natta" | November 18, 2024 | ransomware_live | — |
| Thunderbird Country Club | November 18, 2024 | ransomware_live | — |
| The Recycler Core | November 18, 2024 | ransomware_live | — |
| Palm Facility Services | November 18, 2024 | ransomware_live | — |
| Programs Improving Public Safety | November 18, 2024 | ransomware_live | — |
| K-State College of Veterinary Medicine | November 18, 2024 | ransomware_live | — |
| Fleet Equipment Center, Inc. | November 18, 2024 | ransomware_live | — |
| LA LUCKY Brand | November 1, 2024 | ransomware_live | — |
| mmpunion.com | October 28, 2024 | ransomware_live | — |
| www.keizers.ca | October 28, 2024 | ransomware_live | — |
| barranquitas.pr.gov | October 28, 2024 | ransomware_live | — |
| phxcmp.com | October 28, 2024 | ransomware_live | — |
| PC AfterHours | October 15, 2024 | ransomware_live | — |
| compra-aruba.com | October 14, 2024 | ransomware_live | — |
| totalelectronics.com | October 8, 2024 | ransomware_live | — |
| fleetequipment.com | October 8, 2024 | ransomware_live | — |
| mullenwylie.com | October 4, 2024 | ransomware_live | — |
| bshsoft.com | October 1, 2024 | ransomware_live | — |
| howardcpas.com | October 1, 2024 | ransomware_live | — |
| aberdeenwa.gov | October 1, 2024 | ransomware_live | — |
| datacampos.com | September 30, 2024 | ransomware_live | — |
| gccustommetal.com | September 27, 2024 | ransomware_live | — |
| cmclb.com | September 23, 2024 | ransomware_live | — |
| cucinatagliani.com | September 23, 2024 | ransomware_live | — |
| www.datacampos.com | September 23, 2024 | ransomware_live | — |
| palmfs.com | September 19, 2024 | ransomware_live | — |
| pesprograms.com | September 19, 2024 | ransomware_live | — |
| thinksimple.com | September 19, 2024 | ransomware_live | — |
| curvc.com | September 19, 2024 | ransomware_live | — |
| a1mobilelock.com | September 19, 2024 | ransomware_live | — |
| itasnatta.edu.it | September 19, 2024 | ransomware_live | — |
| rccauto.com | September 19, 2024 | ransomware_live | — |
| seaglesafety.com | September 19, 2024 | ransomware_live | — |
| Nations Homes Commercial & Residential Construction South Carolina, United States | September 6, 2024 | ransomware_live | — |
| The Recycler Core Company | August 31, 2024 | ransomware_live | — |
| Eagle Safety Eyewear | August 24, 2024 | ransomware_live | — |
| www.curvc.com | August 24, 2024 | ransomware_live | — |
| kennedyfunding.com | August 22, 2024 | ransomware_live | — |
| Kennedy Funding | August 22, 2024 | ransomware_live | — |
| patricksanderscompany.com | July 16, 2024 | ransomware_live | — |
| Patrick Sanders and Company, P.C. | July 16, 2024 | ransomware_live | — |
| www.itasnatta.edu.it | June 6, 2024 | ransomware_live | — |
| thunderbirdcc.org | June 6, 2024 | ransomware_live | — |
| cityofpensacola.com | June 6, 2024 | ransomware_live | — |
| Baker Triangle | June 6, 2024 | ransomware_live | — |
| goughhomes.com | June 6, 2024 | ransomware_live | — |
| HTE Technologies | June 6, 2024 | ransomware_live | — |
| www.vet.k-state.edu | June 6, 2024 | ransomware_live | — |
| New River Electrical Corporation | May 7, 2024 | ransomware_live | — |
| newriverelectrical.com | May 7, 2024 | ransomware_live | — |
| celplan.com | April 17, 2024 | ransomware_live | — |
| CelPlan Technologies, Inc. | April 17, 2024 | ransomware_live | — |
| adamshomes.com | April 2, 2024 | ransomware_live | — |
| Adams Homes | April 2, 2024 | ransomware_live | — |
| www.uccretrievals.com | March 9, 2024 | ransomware_live | — |
| goughconstruction.com | March 9, 2024 | ransomware_live | — |
| uccretrievals.com | March 9, 2024 | ransomware_live | — |
| Gough Construction | March 9, 2024 | ransomware_live | — |
| UCC Retrievals, Inc. | March 9, 2024 | ransomware_live | — |
| www.tankerska.hr | February 11, 2024 | ransomware_live | — |
| tankerska.hr | February 11, 2024 | ransomware_live | — |
| ANKERSKA PLOVIDBA d.d. | February 11, 2024 | ransomware_live | — |
| allianceind.com | February 9, 2024 | ransomware_live | — |
| Alliance Industries, LLC. | February 9, 2024 | ransomware_live | — |
| burotec.biz | December 19, 2023 | ransomware_live | — |
| auto-recyclers.com | December 19, 2023 | ransomware_live | — |
| premierpackaging.com | December 19, 2023 | ransomware_live | — |
| A & L Auto Recyclers | December 19, 2023 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).