TridenLocker

Quiet since April 27, 2026
15 victims named on the leak site
0 in the last 30 days
14 in the last 12 months
Dec 2025 first victim we recorded
Apr 27, 2026 most recent victim posted
1 leak site tracked

Data as of August 16, 2026.

What industries TridenLocker targets

Sector identified for 9 of 15 victims.

Financial Services2
Telecommunications1
Manufacturing1
Energy1
Automotive1
Legal1
Technology1
Government1

Where the victims are located

Country identified for 14 of 15 victims.

United States7
United Kingdom3
Canada2
Belgium1
Netherlands1

Every TridenLocker victim

VictimSectorCountryPosted
RT Software rtsw.co.ukTechnologyUnited KingdomApr 27, 2026
JPC Law jpclaw.comLegalUnited StatesMar 6, 2026
Eco Green Group ecogreengroup.co.ukNot identifiedUnited KingdomJan 13, 2026
Allen Printing allenprinting.comNot identifiedUnited StatesDec 22, 2025
noment noment.comNot identifiedNot identifiedDec 3, 2025
Nomentia noment.nlFinancial ServicesNetherlandsDec 3, 2025
Walgreens Boots Alliance walgreensbootsalliance.comNot identifiedUnited StatesDec 3, 2025
Bpost bpost.beFinancial ServicesBelgiumDec 2, 2025
Advantage 360 advantage360.comTelecommunicationsUnited StatesDec 1, 2025
Calmec calmec.comManufacturingCanadaDec 1, 2025
EnQuest enquest.comEnergyUnited KingdomDec 1, 2025
GuestTek guesttek.comNot identifiedCanadaDec 1, 2025
LMG Holdings lmgholdings.comAutomotiveUnited StatesDec 1, 2025
TypeCase Marketing Resource typecaseinc.comNot identifiedUnited StatesDec 1, 2025
Sedgwick Government Solutions sedgwickgovernment.comGovernmentUnited StatesJan 2, 2025

Browse recent data breaches for more.

TridenLocker leak site

The address we've seen TridenLocker publish victims from. Any .onion address needs the Tor Browser.

  • tridentfrdy6jydwywfx4vx422vnto7pktao2gyx2qdcwjanogq454ad.onion

TridenLocker questions

Is TridenLocker still active?

It's gone quiet. The last victim we recorded was April 27, 2026, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.

How many victims has TridenLocker claimed?

TridenLocker has named 15 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 14 of them were posted in the last 12 months.

When did TridenLocker first appear?

The first victim we recorded for TridenLocker was posted on December 1, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does TridenLocker target?

Financial Services accounts for the most victims we can classify, with 2. Telecommunications follows at 1. We could identify a sector for 9 of 15 victims, so treat this as the shape of the targeting rather than a full census.

Has TridenLocker already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.