BreachCensus

interlock

First seen October 13, 2024Active123 claimed victims

The claims below are reproduced as posted by interlock on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

Interlock is a ransomware group first observed in September 2024 that targets critical infrastructure sectors including healthcare, government, education, and technology across North America and Europe using double-extortion, with 57+ claimed victims including a major US dialysis provider exposing over two million patient records.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
The Smeg GroupMarch 1, 2025ransomware_live
Wayne County, MichiganMarch 1, 2025ransomware_live
The Siegel Group, Inc.February 25, 2025ransomware_live
National Defense CorpFebruary 24, 2025ransomware_live
Aztec Municipal School DistrictFebruary 22, 2025ransomware_live
Siegel GroupFebruary 21, 2025ransomware_live
Drive ProductsFebruary 19, 2025ransomware_live
City of NoblesvilleDecember 20, 2024ransomware_live
Heritage BankDecember 17, 2024ransomware_live
Boston Chinatown Neighborhood CenterDecember 9, 2024ransomware_live
RJM MarketingDecember 6, 2024ransomware_live
McCormick & PrioreNovember 26, 2024ransomware_live
Bishop Ireton High SchoolNovember 20, 2024ransomware_live
Indesign, LLCNovember 19, 2024ransomware_live
Winnebago Public School FoundationNovember 7, 2024ransomware_live
Texas Tech University Health Sciences CenterOctober 27, 2024ransomware_live
Legacy Treatment ServicesOctober 26, 2024ransomware_live
SmegOctober 24, 2024ransomware_live
Drug and Alcohol Treatment ServiceOctober 24, 2024ransomware_live
Wayne CountyOctober 23, 2024ransomware_live
Brockton Neighborhood Health CenterOctober 20, 2024ransomware_live
Cathexis Holdings LPOctober 13, 2024ransomware_live
MilanoDecember 1, 2023ransomware_live
← NewerPage 2 of 2

Claim data from ransomware.live and RansomLook (CC BY 4.0).