Interlock
Data as of September 14, 2026.
Credential exposure before the attack
45.8% of Interlock victims whose domain we can identify (55 of 120) had employee credentials leak in the 12 months before Interlock named them as a victim.
We don't know whether any of these credentials were how Interlock gained initial access.
What industries Interlock targets
Sector identified for 86 of 121 victims.
| Education | 26 | |
| Manufacturing | 15 | |
| Healthcare | 12 | |
| Government | 7 | |
| Financial Services | 6 | |
| Legal | 6 | |
| Non-profit | 4 | |
| Construction | 4 |
Where the victims are located
Country identified for 80 of 121 victims.
| United States | 63 | |
| United Kingdom | 6 | |
| Canada | 5 | |
| Australia | 2 | |
| Mexico | 1 | |
| Poland | 1 | |
| Italy | 1 | |
| Spain | 1 |
Most recent Interlock victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| NFM Lending nfmlending.com | Not identified | United States | Sep 8, 2026 |
| Super Systems supersystems.com | Manufacturing | United States | Sep 1, 2026 |
| Southeastern Oklahoma State University se.edu | Education | United States | Aug 20, 2026 |
| AngMar angmarcompanies.com | Healthcare | United States | Aug 12, 2026 |
| Gardiner Family Chiropractic gardinerfamilychiropractic.com | Healthcare | United States | Aug 3, 2026 |
| Centre for Newcomers centrefornewcomers.ca | Non-profit | Canada | Jul 20, 2026 |
| Paragon Store Fixtures paragonstorefixtures.com | Manufacturing | United States | Jul 20, 2026 |
| District of Columbia Housing Authority dchousing.org | Government | United States | Jul 17, 2026 |
| Converting Equipment International slitandrewind.com | Manufacturing | United States | Jul 17, 2026 |
| Borger Independent School District borgerisd.net | Education | United States | Jul 13, 2026 |
| YMCA of Western North Carolina ymcawnc.org | Non-profit | United States | Jul 8, 2026 |
| Clearview Eye Centre clearvieweyecentre.com | Not identified | Canada | Jun 26, 2026 |
| Reynella East College sa.edu.au | Education | Australia | Jun 24, 2026 |
| Cold Front Distribution coldfrontdist.com | Logistics | United States | Jun 3, 2026 |
| First United Methodist Church Boerne fumc-boerne.org | Not identified | United States | May 12, 2026 |
| Kent District Library kdl.org | Not identified | United States | May 12, 2026 |
| Park Dental Research pdrus.com | Healthcare | United States | May 12, 2026 |
| Waterford Hotel Group waterfordhotelgroup.com | Hospitality | United States | May 12, 2026 |
| Lonestar Truck Group tntxtruck.com | Not identified | United States | May 5, 2026 |
| Winona County winonacounty.gov | Government | United States | Apr 30, 2026 |
Showing the 20 most recent of 121. Browse recent data breaches for more.
Interlock leak sites
Addresses we've seen Interlock publish victims from. Any .onion address needs the Tor Browser.
ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onione762chqol5savlrfqljepxwtozrxxwarkuyhqps2n34tm3rliff4beqd.onion5mk7t3hpdjei4ezymeog3kfsjmfxghvwr5ekerdilitafolstou5vpid.oniongmgcrvr2piu5wl7eh7vuw3cyrunksox5d4zhvdkgd3kbnwbgvrglkjad.onionhhmbi4q4sy7m7oyfrpjkxparnrrwijna3ncucu3vwc24v7xhjvst7nqd.onionad7tx2oyln5g6yk7turvhjxhqvunfucuiq5iwzc5odlomft7tvysxvqd.onionz6xr75yrgbry3a7zxc734sac2u6libikshm2j5tsbrh5geq7ilik3nad.onion523gzulwswe5tfevqlrxvqqh2fxo2mwrs2irnjel4mtu7qodgdu2ccyd.onionnfx5jpjpyzshisp2kerg23h5vyckzca7nt7psfbp7oo5jlfbbbqthtad.onionyp7yctliltdy3mdrdd2lfvcjx2xgcxrbvycje47jn6fbceurgznnapqd.oniona7rg7mb56w3s6yzmflzjbqbhfxpuuw5fwvq6ci52jrfjgvt7weu2qcqd.onion6mwjyc64rnkht3qc4bv7svpufmbvm3k73vekxgdlsbqzx5toueq3ndyd.onion65bhkrfbqnfjgcsr7456luzjauw5nikuwxradlysivy5wbttjikdhxid.oniontpwgxrocjvlonhrfjm4jx3dore2u4brxfj4ikt7iba36c23svthhf7ad.oniontyrvuuh5tvrvk4x6lfxrvgabqmzpnxehelmdqztu3vekujcknvl2ufad.onionk5pmfzuqwxr2uhnskktjicbnzr633zejupe54yginljj3mgoysfwe4id.onion4awnzgndu5u3bb6vne2vixizdftkc4mdlz45lnrhjgelzm5ujywxmuqd.onionhp4fxytyky26q3kpgqlhewhrazaag5wg4jsaiwxlv3lkd7r7rmsamqyd.onionsjd7ssbiptl62jktrwc5yffsh4llljx7hswfltnfkttq47gdjlpknxid.onionsogw6fz6swsg42esmor63wj3iijpmoydt7sizwgzf2k6na6nglqt52ad.onionkbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onionljurl2gqwtgfqzk6pkz5ggtdrdrpzpzzkdvf4jhpkk33dnwkcsmdi4ad.onionhu5zd7ek6glyoke5kfc4mvt6s3cmia6ebtqptumvbogzdo2vrn5e7bid.onionx2ol75zago3z2nrp7lnmbcwoq3okiexuwi456oe6jqurbprg6lljz3yd.onionpgjf3dfkamnprahggbw4yojyb7sot3no2glnbfwyzbzqbnaislpv52yd.onion
Interlock questions
Is Interlock still active?
Yes. Interlock posted its most recent victim on September 8, 2026. That's 3 victims in the last 30 days.
How many victims has Interlock claimed?
Interlock has named 121 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 53 of them were posted in the last 12 months.
When did Interlock first appear?
The first victim we recorded for Interlock was posted on October 14, 2024. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Interlock target?
Education accounts for the most victims we can classify, with 26. Manufacturing follows at 15. We could identify a sector for 86 of 121 victims, so treat this as the shape of the targeting rather than a full census.
Has Interlock already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.