TridenLocker

Active
16 victims named on the leak site
1 in the last 30 days
15 in the last 12 months
Dec 2025 first victim we recorded
Sep 7, 2026 most recent victim posted
1 leak site tracked

Data as of September 15, 2026.

What industries TridenLocker targets

Sector identified for 10 of 16 victims.

Financial Services2
Legal1
Technology1
Government1
Construction1
Telecommunications1
Manufacturing1
Energy1

Where the victims are located

Country identified for 15 of 16 victims.

United States8
United Kingdom3
Canada2
Belgium1
Netherlands1

Every TridenLocker victim

VictimSectorCountryPosted
SouthernCarlson southerncarlson.comConstructionUnited StatesSep 7, 2026
RT Software rtsw.co.ukTechnologyUnited KingdomApr 27, 2026
JPC Law jpclaw.comLegalUnited StatesMar 6, 2026
Eco Green Group ecogreengroup.co.ukNot identifiedUnited KingdomJan 13, 2026
Allen Printing allenprinting.comNot identifiedUnited StatesDec 22, 2025
noment noment.comNot identifiedNot identifiedDec 3, 2025
Nomentia noment.nlFinancial ServicesNetherlandsDec 3, 2025
Walgreens Boots Alliance walgreensbootsalliance.comNot identifiedUnited StatesDec 3, 2025
Bpost bpost.beFinancial ServicesBelgiumDec 2, 2025
Advantage 360 advantage360.comTelecommunicationsUnited StatesDec 1, 2025
Calmec calmec.comManufacturingCanadaDec 1, 2025
EnQuest enquest.comEnergyUnited KingdomDec 1, 2025
GuestTek guesttek.comNot identifiedCanadaDec 1, 2025
LMG Holdings lmgholdings.comAutomotiveUnited StatesDec 1, 2025
TypeCase Marketing Resource typecaseinc.comNot identifiedUnited StatesDec 1, 2025
Sedgwick Government Solutions sedgwickgovernment.comGovernmentUnited StatesJan 2, 2025

Browse recent data breaches for more.

TridenLocker leak site

The address we've seen TridenLocker publish victims from. Any .onion address needs the Tor Browser.

  • tridentfrdy6jydwywfx4vx422vnto7pktao2gyx2qdcwjanogq454ad.onion

TridenLocker questions

Is TridenLocker still active?

Yes. TridenLocker posted its most recent victim on September 7, 2026.

How many victims has TridenLocker claimed?

TridenLocker has named 16 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 15 of them were posted in the last 12 months.

When did TridenLocker first appear?

The first victim we recorded for TridenLocker was posted on December 1, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does TridenLocker target?

Financial Services accounts for the most victims we can classify, with 2. Legal follows at 1. We could identify a sector for 10 of 16 victims, so treat this as the shape of the targeting rather than a full census.

Has TridenLocker already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.