interlock
First seen October 13, 2024Active140 claimed victims
The claims below are reproduced as posted by interlock on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Interlock is a ransomware group first observed in September 2024 that targets critical infrastructure sectors including healthcare, government, education, and technology across North America and Europe using double-extortion, with 57+ claimed victims including a major US dialysis provider exposing over two million patient records.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| A/C Supply | May 9, 2025 | ransomware_live | — |
| Semple & Cooper | May 7, 2025 | ransomware_live | — |
| Semple, Marchal & Cooper, LLP | May 7, 2025 | ransomware_live | — |
| Fowler Elementary School | May 3, 2025 | ransomware_live | — |
| Janco Steel | April 30, 2025 | ransomware_live | — |
| West Lothian Council | April 30, 2025 | ransomware_live | — |
| Bentley Industries | April 28, 2025 | ransomware_live | — |
| Kalamazoo Public School District | April 26, 2025 | ransomware_live | — |
| DaVita | April 12, 2025 | ransomware_live | — |
| Madison School District Schools | April 3, 2025 | ransomware_live | — |
| PMA | March 23, 2025 | ransomware_live | — |
| Cherokee County School District | March 16, 2025 | ransomware_live | — |
| Andretti Indoor Karting & Games | March 16, 2025 | ransomware_live | — |
| Doman | March 11, 2025 | ransomware_live | — |
| Doman Building Materials Group | March 11, 2025 | ransomware_live | — |
| Hancock Public School | March 7, 2025 | ransomware_live | — |
| General Formulations | March 4, 2025 | ransomware_live | — |
| The Smeg Group | March 1, 2025 | ransomware_live | — |
| Wayne County, Michigan | March 1, 2025 | ransomware_live | — |
| The Siegel Group, Inc. | February 25, 2025 | ransomware_live | — |
| National Defense Corp | February 24, 2025 | ransomware_live | — |
| Aztec Municipal School District | February 22, 2025 | ransomware_live | — |
| Siegel Group | February 21, 2025 | ransomware_live | — |
| Drive Products | February 19, 2025 | ransomware_live | — |
| City of Noblesville | December 20, 2024 | ransomware_live | — |
| Heritage Bank | December 17, 2024 | ransomware_live | — |
| Boston Chinatown Neighborhood Center | December 9, 2024 | ransomware_live | — |
| RJM Marketing | December 6, 2024 | ransomware_live | — |
| McCormick & Priore | November 26, 2024 | ransomware_live | — |
| Bishop Ireton High School | November 20, 2024 | ransomware_live | — |
| Indesign, LLC | November 19, 2024 | ransomware_live | — |
| Winnebago Public School Foundation | November 7, 2024 | ransomware_live | — |
| Texas Tech University Health Sciences Center | October 27, 2024 | ransomware_live | — |
| Legacy Treatment Services | October 26, 2024 | ransomware_live | — |
| Smeg | October 24, 2024 | ransomware_live | — |
| Drug and Alcohol Treatment Service | October 24, 2024 | ransomware_live | — |
| Wayne County | October 23, 2024 | ransomware_live | — |
| Brockton Neighborhood Health Center | October 20, 2024 | ransomware_live | — |
| Cathexis Holdings LP | October 13, 2024 | ransomware_live | — |
| Milano | December 1, 2023 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).