Ransomware group
AiLock ransomware: victims and leak site activity
The AiLock ransomware group has listed 51 victims on its leak site since March 2026; its latest post is from 26 August 2026. Most affected countries: United States, Japan and United Kingdom. Most targeted sector: Professional Services.
Total posts
51
First seen
2026-03-03
Latest post
2026-08-26
Countries hit
18
About AiLock
AiLock is a ransomware operation that emerged in early 2025, marketing itself as AI-assisted ransomware using a hybrid ChaCha20/NTRUEncrypt encryption scheme and double-extortion tactics, actively recruiting affiliates and threatening regulatory reporting if ransoms are unpaid.
Most targeted countries
- United States 23
- Japan 5
- United Kingdom 4
- Germany 3
- Canada 2
- Belgium 1
- Switzerland 1
- Chile 1
- China 1
- Spain 1
Most targeted sectors
- Professional Services 12
- Manufacturing 11
- Technology 9
- Retail & E-Commerce 7
- Agriculture and Food Production 2
- Government & Defense 2
- Transportation 2
- Education 1
- Financial Services 1
- Healthcare 1