Xing Locker
Data as of August 16, 2026.
Credential exposure before the attack
71.4% of Xing Locker victims whose domain we can identify (15 of 21) had employee credentials leak in the 12 months before Xing Locker named them as a victim.
We don't know whether any of these credentials were how Xing Locker gained initial access.
What industries Xing Locker targets
Sector identified for 2 of 21 victims.
| Government | 1 | |
| Construction | 1 |
Where the victims are located
Country identified for 4 of 21 victims.
| United States | 2 | |
| Turkey | 2 |
Most recent Xing Locker victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| tilia.info | Not identified | Not identified | Oct 8, 2021 |
| jirwinco.com | Not identified | Not identified | Aug 17, 2021 |
| diasorin.com | Not identified | Not identified | Jul 8, 2021 |
| gfpi.com | Not identified | Not identified | Jun 3, 2021 |
| aqualung.com | Not identified | Not identified | Jun 2, 2021 |
| positivepromotions.com | Not identified | Not identified | Jun 2, 2021 |
| alsharafi.com | Not identified | Not identified | May 27, 2021 |
| coastalfamilyhealth.org | Not identified | Not identified | May 24, 2021 |
| tis-spb.com | Not identified | Not identified | May 24, 2021 |
| osfhealthcare.org | Not identified | Not identified | May 18, 2021 |
| cbn.com.tr | Not identified | Turkey | May 14, 2021 |
| linestar.com | Not identified | Not identified | May 14, 2021 |
| solen.com.tr | Not identified | Turkey | May 14, 2021 |
| desertplastering.com | Construction | United States | May 13, 2021 |
| gulfeaglesupply.com | Not identified | Not identified | May 11, 2021 |
| bridgelux.com | Not identified | Not identified | May 6, 2021 |
| globemedsaudi.com | Not identified | Not identified | May 6, 2021 |
| washoetribe.us | Government | United States | May 6, 2021 |
| navnitgroup.com | Not identified | Not identified | Apr 29, 2021 |
| pezzutoautomotive.com | Not identified | Not identified | Apr 29, 2021 |
Showing the 20 most recent of 21. Browse recent data breaches for more.
Xing Locker leak site
The address we've seen Xing Locker publish victims from. Any .onion address needs the Tor Browser.
xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion
Xing Locker questions
Is Xing Locker still active?
Not for over a year. The last victim we recorded was October 8, 2021. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has Xing Locker claimed?
Xing Locker has named 21 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did Xing Locker first appear?
The first victim we recorded for Xing Locker was posted on April 29, 2021. That's when the group entered our collection, which isn't necessarily when it started operating.
Has Xing Locker already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.