LunaLock

Quiet since September 17, 2025
2 victims named on the leak site
0 in the last 30 days
2 in the last 12 months
Sep 2025 first victim we recorded
Sep 17, 2025 most recent victim posted
1 leak site tracked

Data as of August 16, 2026.

What industries LunaLock targets

Sector identified for 1 of 2 victims.

Telecommunications1

Where the victims are located

Country identified for all 2 victims.

United States1
Mexico1

Every LunaLock victim

VictimSectorCountryPosted
JAFICA Telecomunicaciones jafica.comTelecommunicationsMexicoSep 17, 2025
Artists&Clients artistsnclients.comNot identifiedUnited StatesSep 3, 2025

Browse recent data breaches for more.

LunaLock leak site

The address we've seen LunaLock publish victims from. Any .onion address needs the Tor Browser.

  • lunalockcccxzkpfovwzifwxcytqkiuak6wzybnniqwxcmpsetpbetid.onion

LunaLock questions

Is LunaLock still active?

It's gone quiet. The last victim we recorded was September 17, 2025, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.

How many victims has LunaLock claimed?

LunaLock has named 2 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.

When did LunaLock first appear?

The first victim we recorded for LunaLock was posted on September 3, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.

Has LunaLock already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.