BQTlock

Quiet since April 6, 2026
23 victims named on the leak site
0 in the last 30 days
7 in the last 12 months
Jul 2025 first victim we recorded
Apr 6, 2026 most recent victim posted
1 leak site tracked

Data as of August 16, 2026.

Credential exposure before the attack

0% of BQTlock victims whose domain we can identify (0 of 23) had employee credentials leak in the 12 months before BQTlock named them as a victim.

We don't know whether any of these credentials were how BQTlock gained initial access.

What industries BQTlock targets

Sector identified for 13 of 23 victims.

Technology5
Education4
Hospitality2
Healthcare1
Non-profit1

Where the victims are located

Country identified for 15 of 23 victims.

Ireland7
United Arab Emirates6
India1
Israel1

Most recent BQTlock victims

VictimSectorCountryPosted
Metro Hospital metrohospitals.comHealthcareIndiaApr 6, 2026
Arabian Desert Safari arabiandesertsafari.netNot identifiedUnited Arab EmiratesDec 29, 2025
Dhow Cruise Dubai Harbour dhowcruisedubaiharbour.comHospitalityUnited Arab EmiratesDec 29, 2025
Hatta Heritage Village hattaheritagevillage.comHospitalityUnited Arab EmiratesDec 29, 2025
Morning Desert Safari morningdesertsafari.netNot identifiedUnited Arab EmiratesDec 29, 2025
ADORE adoreuae.comNot identifiedUnited Arab EmiratesOct 13, 2025
Emirates Private School Fujairah epsfuj.comEducationUnited Arab EmiratesOct 13, 2025
Bizoneo Membership bizoneo-membership.euNot identifiedNot identifiedAug 11, 2025
Bizoneo bizoneo.comTechnologyIrelandAug 11, 2025
Bizoneo Group bizoneo.euTechnologyIrelandAug 11, 2025
Bizosoft bizosoft.euTechnologyIrelandAug 11, 2025
Irish Cleanroom Society cleanrooms-ireland.ieNon-profitIrelandAug 11, 2025
Data Protection Act 2018 dataprotectionact.ieNot identifiedIrelandAug 11, 2025
Tourist Guides of Ireland tourguides.ieNot identifiedIrelandAug 11, 2025
Wandsoft wandsoft.comTechnologyIrelandAug 11, 2025
eFunda efunda.comNot identifiedNot identifiedJul 31, 2025
Service Academy Business Resource Directory isabrd.comEducationNot identifiedJul 31, 2025
Letterwinner Club letterwinner.comNot identifiedNot identifiedJul 31, 2025
USNA Class of 1987 usna87.comEducationNot identifiedJul 31, 2025
Varsity O varsityo.comEducationNot identifiedJul 31, 2025

Showing the 20 most recent of 23. Browse recent data breaches for more.

BQTlock leak site

The address we've seen BQTlock publish victims from. Any .onion address needs the Tor Browser.

  • yywhylvqeqynzik6ibocb53o2nat7lmzn5ynjpar3stndzcgmy6dkgid.onion

BQTlock questions

Is BQTlock still active?

It's gone quiet. The last victim we recorded was April 6, 2026, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.

How many victims has BQTlock claimed?

BQTlock has named 23 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 7 of them were posted in the last 12 months.

When did BQTlock first appear?

The first victim we recorded for BQTlock was posted on July 31, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does BQTlock target?

Technology accounts for the most victims we can classify, with 5. Education follows at 4. We could identify a sector for 13 of 23 victims, so treat this as the shape of the targeting rather than a full census.

Has BQTlock already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.