Interlock

Active
126 victims named on the leak site
7 in the last 30 days
58 in the last 12 months
Oct 2024 first victim we recorded
Oct 1, 2026 most recent victim posted
25 leak sites tracked

Data as of October 1, 2026.

Credential exposure before the attack

44.8% of Interlock victims whose domain we can identify (56 of 125) had employee credentials leak in the 12 months before Interlock named them as a victim.

We don't know whether any of these credentials were how Interlock gained initial access.

What industries Interlock targets

Sector identified for 91 of 126 victims.

Education27
Manufacturing15
Healthcare13
Government8
Legal7
Financial Services6
Construction5
Non-profit4

Where the victims are located

Country identified for 85 of 126 victims.

United States68
United Kingdom6
Canada5
Australia2
Poland1
Mexico1
Spain1
Italy1

Most recent Interlock victims

VictimSectorCountryPosted
Blaise C. Bender bcbenderlaw.comLegalUnited StatesOct 1, 2026
Tekko Enterprises tekkoinc.comConstructionUnited StatesSep 30, 2026
The Center for Kidney Care renaldocs.comHealthcareUnited StatesSep 29, 2026
City of Fort Smith Arkansas fortsmithar.govGovernmentUnited StatesSep 16, 2026
Springfield Public Schools springfieldpublicschools.comEducationUnited StatesSep 16, 2026
NFM Lending nfmlending.comNot identifiedUnited StatesSep 8, 2026
Super Systems supersystems.comManufacturingUnited StatesSep 1, 2026
Southeastern Oklahoma State University se.eduEducationUnited StatesAug 20, 2026
AngMar angmarcompanies.comHealthcareUnited StatesAug 12, 2026
Gardiner Family Chiropractic gardinerfamilychiropractic.comHealthcareUnited StatesAug 3, 2026
Centre for Newcomers centrefornewcomers.caNon-profitCanadaJul 20, 2026
Paragon Store Fixtures paragonstorefixtures.comManufacturingUnited StatesJul 20, 2026
District of Columbia Housing Authority dchousing.orgGovernmentUnited StatesJul 17, 2026
Converting Equipment International slitandrewind.comManufacturingUnited StatesJul 17, 2026
Borger Independent School District borgerisd.netEducationUnited StatesJul 13, 2026
YMCA of Western North Carolina ymcawnc.orgNon-profitUnited StatesJul 8, 2026
Clearview Eye Centre clearvieweyecentre.comNot identifiedCanadaJun 26, 2026
Reynella East College sa.edu.auEducationAustraliaJun 24, 2026
Cold Front Distribution coldfrontdist.comLogisticsUnited StatesJun 3, 2026
First United Methodist Church Boerne fumc-boerne.orgNot identifiedUnited StatesMay 12, 2026

Showing the 20 most recent of 126. Browse recent data breaches for more.

Interlock leak sites

Addresses we've seen Interlock publish victims from. Any .onion address needs the Tor Browser.

  • ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion
  • e762chqol5savlrfqljepxwtozrxxwarkuyhqps2n34tm3rliff4beqd.onion
  • 5mk7t3hpdjei4ezymeog3kfsjmfxghvwr5ekerdilitafolstou5vpid.onion
  • gmgcrvr2piu5wl7eh7vuw3cyrunksox5d4zhvdkgd3kbnwbgvrglkjad.onion
  • hhmbi4q4sy7m7oyfrpjkxparnrrwijna3ncucu3vwc24v7xhjvst7nqd.onion
  • ad7tx2oyln5g6yk7turvhjxhqvunfucuiq5iwzc5odlomft7tvysxvqd.onion
  • 6mwjyc64rnkht3qc4bv7svpufmbvm3k73vekxgdlsbqzx5toueq3ndyd.onion
  • nfx5jpjpyzshisp2kerg23h5vyckzca7nt7psfbp7oo5jlfbbbqthtad.onion
  • yp7yctliltdy3mdrdd2lfvcjx2xgcxrbvycje47jn6fbceurgznnapqd.onion
  • a7rg7mb56w3s6yzmflzjbqbhfxpuuw5fwvq6ci52jrfjgvt7weu2qcqd.onion
  • z6xr75yrgbry3a7zxc734sac2u6libikshm2j5tsbrh5geq7ilik3nad.onion
  • 65bhkrfbqnfjgcsr7456luzjauw5nikuwxradlysivy5wbttjikdhxid.onion
  • 523gzulwswe5tfevqlrxvqqh2fxo2mwrs2irnjel4mtu7qodgdu2ccyd.onion
  • tpwgxrocjvlonhrfjm4jx3dore2u4brxfj4ikt7iba36c23svthhf7ad.onion
  • tyrvuuh5tvrvk4x6lfxrvgabqmzpnxehelmdqztu3vekujcknvl2ufad.onion
  • k5pmfzuqwxr2uhnskktjicbnzr633zejupe54yginljj3mgoysfwe4id.onion
  • 4awnzgndu5u3bb6vne2vixizdftkc4mdlz45lnrhjgelzm5ujywxmuqd.onion
  • hp4fxytyky26q3kpgqlhewhrazaag5wg4jsaiwxlv3lkd7r7rmsamqyd.onion
  • sjd7ssbiptl62jktrwc5yffsh4llljx7hswfltnfkttq47gdjlpknxid.onion
  • sogw6fz6swsg42esmor63wj3iijpmoydt7sizwgzf2k6na6nglqt52ad.onion
  • hu5zd7ek6glyoke5kfc4mvt6s3cmia6ebtqptumvbogzdo2vrn5e7bid.onion
  • x2ol75zago3z2nrp7lnmbcwoq3okiexuwi456oe6jqurbprg6lljz3yd.onion
  • pgjf3dfkamnprahggbw4yojyb7sot3no2glnbfwyzbzqbnaislpv52yd.onion
  • efs3fkrjyvqsk7nugzteelo5i5jxoch5ziqhf37dzmmlmzzlymhawmid.onion
  • kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion

Interlock questions

Is Interlock still active?

Yes. Interlock posted its most recent victim on October 1, 2026. That's 7 victims in the last 30 days.

How many victims has Interlock claimed?

Interlock has named 126 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 58 of them were posted in the last 12 months.

When did Interlock first appear?

The first victim we recorded for Interlock was posted on October 14, 2024. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does Interlock target?

Education accounts for the most victims we can classify, with 27. Manufacturing follows at 15. We could identify a sector for 91 of 126 victims, so treat this as the shape of the targeting rather than a full census.

Has Interlock already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.