satanlockv2
First seen July 4, 2025Active4 claimed victims
The claims below are reproduced as posted by satanlockv2 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
SatanLock is a short-lived ransomware group that first appeared in April 2025 and abruptly shut down in July 2025 after claiming attacks against roughly 67 organizations — though over 65% of listed victims were duplicates from other groups — leaking all stolen data publicly upon shutdown.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Satanlock project will be shut down | July 7, 2025 | ransomware_live | — |
| https://klinikdrindrajana.com/ | July 6, 2025 | ransomware_live | — |
| studionotarile.com | July 4, 2025 | ransomware_live | — |
| fkk.ac.th | July 4, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).