Ransomware group
Blacklock ransomware: victims and leak site activity
The Blacklock ransomware group has listed 64 victims on its leak site since May 2025; its latest post is from 2 July 2025. Most affected countries: United States, Canada and Spain. Most targeted sector: Manufacturing.
Total posts
64
First seen
2025-05-16
Latest post
2025-07-02
Countries hit
19
About Blacklock
BlackLock is a rebranded version of another ransomware group known as Eldorado. It has since become one of the most active extortion syndicates in 2025, heavily targeting technology, manufacturing, construction, finance, and retail sectors.
Most targeted countries
- United States 38
- Canada 4
- Spain 3
- Australia 2
- United Kingdom 2
- India 2
- United Arab Emirates 1
- Argentina 1
- Aruba 1
- Brazil 1
Most targeted sectors
- Manufacturing 14
- Professional Services 11
- Technology 9
- Retail & E-Commerce 5
- Transportation 5
- Agriculture and Food Production 3
- Energy & Utilities 3
- Financial Services 3
- Government & Defense 3
- Education 2