R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/blacklock

blacklock

Inactive

BlackLock is a rebranded version of another ransomware group known as Eldorado. It has since become one of the most active extortion syndicates in 2025, heavily targeting technology, manufacturing, construction, finance, and retail sectors.

64
Victims
1
Sites

Known Leak Sites

zdkexsh2e7yihw5uhg5hpsgq3dois2m5je7lzfagij2y6iw5ptl35gyd.onionDLS

Victims (64)

Live
Oxford Universal Corp
blacklock
NK Customer Solutions
blacklockIN
Ubon Ratchathani University
blacklockTH
Olivera Canarias
blacklockES
Ryan Harvie McEnery
blacklockGB
Solar City Tyre Service
blacklockAU
Navesink Rehab
blacklockUS
Solar City
blacklockUS
Lumenation
blacklock
Riverdell Construction
blacklock
MCM Construction
blacklockUS
Quick Frames USA
blacklockUS
Neurosurgeons
blacklock
Lac La Biche Transport
blacklockCA
Reliance Heating
blacklock
Fleet Equipment Center, Inc.
blacklockUS
ATD-American
blacklockUS
K-State College of Veterinary Medicine
blacklockUS
UCC Retrievals, Inc.
blacklockUS
TBM Consulting Group, Inc.
blacklockUS
Premier Packaging
blacklock
LINDOSTAR
blacklockUS
HTE Technologies
blacklockUS
Gough Construction
blacklock
Kennedy Funding
blacklockUS

Top Targeted Countries

United States24
Unknown16
Spain3
Canada3
India2

Activity

Total victims64
Countries affected20
Last seen