tridentlocker
First seen November 29, 2025Active17 claimed victims
The claims below are reproduced as posted by tridentlocker on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
TridentLocker is a newly emerged ransomware group (surfaced mid-2025) targeting organizations managing high volumes of regulated or third-party data — including government services, telecom, and engineering firms — across the US, Canada, UK, and Asia using double-extortion tactics.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| SouthernCarlson | September 4, 2026 | ransomlook | — |
| RT Software | April 26, 2026 | ransomware_live | — |
| Jameson Pepple Cantu PLLC | March 5, 2026 | ransomware_live | — |
| TMPartner | February 6, 2026 | ransomware_live | — |
| Eco Green Group | January 12, 2026 | ransomware_live | — |
| Sedgwick Government Solutions | December 30, 2025 | ransomware_live | — |
| allenprinting | December 19, 2025 | ransomware_live | — |
| Advantage 360 | November 20, 2025 | ransomware_live | — |
| GuestTek | November 20, 2025 | ransomware_live | — |
| iqs | November 18, 2025 | ransomware_live | — |
| noment | November 12, 2025 | ransomware_live | — |
| LMG Holdings | November 10, 2025 | ransomware_live | — |
| typecaseinc | November 6, 2025 | ransomware_live | — |
| bpost | November 6, 2025 | ransomware_live | — |
| asiawba | November 5, 2025 | ransomware_live | — |
| Calmec | October 29, 2025 | ransomware_live | — |
| EnQuest | October 21, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).