Threat actor tracker 78 incidents tracked

Warlock — every breach we're tracking

Running log of incidents attributed to or claimed by Warlock in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked78

Latest activityNovember 06, 2025

TypeRansomware / extortion

Groups like Warlock steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 78 incidents we've attributed to Warlock.

high November 06, 2025

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →

15 seconds · 15.4B+ records checked · no account, no card

W Choose your protection level COMPARE PLANS →

One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.

Tracked incidents

silanosn.local Listed by warlock Ransomware Group

atg.cz Listed by warlock Ransomware Group

bel.quadra.ru Listed by warlock Ransomware Group

sf.walltopia.com Listed by warlock Ransomware Group

alphasys.bo Listed by warlock Ransomware Group

tein.co.jp Listed by warlock Ransomware Group

ippm.org Listed by warlock Ransomware Group

nartis.ru Listed by warlock Ransomware Group

goldenline.com Listed by warlock Ransomware Group

metro.local Listed by warlock Ransomware Group

mnpease.ca Listed by warlock Ransomware Group

miltech.local Listed by warlock Ransomware Group

cybervector.co.uk Listed by warlock Ransomware Group

energogroup.net Listed by warlock Ransomware Group

bengineered.com.au Listed by warlock Ransomware Group

fabrity.local Listed by warlock Ransomware Group

mytune.me Listed by warlock Ransomware Group

siball.net Listed by warlock Ransomware Group

jubileelife.com Listed by warlock Ransomware Group

medkar.com Listed by warlock Ransomware Group

ferus-smit.home Listed by warlock Ransomware Group

kmssa.net Listed by warlock Ransomware Group

elssurveying.com Listed by warlock Ransomware Group

chroma.com.tw Listed by warlock Ransomware Group

webville.net Listed by warlock Ransomware Group

okan.ru Listed by warlock Ransomware Group

gmpc.com Listed by warlock Ransomware Group

mffood.com Listed by warlock Ransomware Group

airfastindonesia.com Listed by warlock Ransomware Group

hitachi-hta.com Listed by warlock Ransomware Group

primrose.com Listed by warlock Ransomware Group

tagorg.com Listed by warlock Ransomware Group

clearybuilding.us Listed by warlock Ransomware Group

wfd2027uae.ae Listed by warlock Ransomware Group

magcpa.com Listed by warlock Ransomware Group

colt.net Listed by warlock Ransomware Group

accsnet.com Listed by warlock Ransomware Group

advion.com Listed by warlock Ransomware Group

anthembio.com Listed by warlock Ransomware Group

brightwork.com Listed by warlock Ransomware Group

syspro.com Listed by warlock Ransomware Group

webcids.com Listed by warlock Ransomware Group

rougine-mfg.com Listed by warlock Ransomware Group

wytechnology.local Listed by warlock Ransomware Group

sipecom.com Listed by warlock Ransomware Group

starsalliance.com Listed by warlock Ransomware Group

infoniqa.com Listed by warlock Ransomware Group

mysecop.com Listed by warlock Ransomware Group

orange.com Listed by warlock Ransomware Group

atcmanufacturing Listed by warlock Ransomware Group

argeninta Listed by warlock Ransomware Group

woodboure Listed by warlock Ransomware Group

houra Listed by warlock Ransomware Group

STRGOME Listed by warlock Ransomware Group

houxt Listed by warlock Ransomware Group

gmtaconline Listed by warlock Ransomware Group

getdomain Listed by warlock Ransomware Group

kipl Listed by warlock Ransomware Group

nszi Listed by warlock Ransomware Group

dad Listed by warlock Ransomware Group

Your email leaked. See who’s selling your address.