BLACKLOCKS
Data as of October 22, 2026.
What industries BLACKLOCKS targets
Sector identified for 1 of 3 victims.
| Manufacturing | 1 |
Where the victims are located
Country identified for all 3 victims.
| South Africa | 2 | |
| South Korea | 1 |
Every BLACKLOCKS victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| ARCA Unlimited Architects arcaunlimited.com | Not identified | South Africa | Sep 28, 2026 |
| Apollo 21 Used Trucks and Spares apollo21.co.za | Not identified | South Africa | Sep 24, 2026 |
| Kwang Myung Industry kmin.co.kr | Manufacturing | South Korea | Sep 7, 2026 |
Browse recent data breaches for more.
BLACKLOCKS leak site
The address we've seen BLACKLOCKS publish victims from. Any .onion address needs the Tor Browser.
ybvjht7qcuhcml4pjcs7fgk57tzysplqtfq4i7yrwc6vjilin2dt2qad.onion
BLACKLOCKS questions
Is BLACKLOCKS still active?
Yes. BLACKLOCKS posted its most recent victim on September 28, 2026. That's 2 victims in the last 30 days.
How many victims has BLACKLOCKS claimed?
BLACKLOCKS has named 3 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did BLACKLOCKS first appear?
The first victim we recorded for BLACKLOCKS was posted on September 7, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Has BLACKLOCKS already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.