THREAT ACTOR
AILOCK_
ActiveAILOCK is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of AILOCK, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2026 51
Leak site mirrors
41 mirrors tracked, 4 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
jaawqs6wu56n2adj7qrjg25dhcux2nislvjouffpzldj23e4y72akoid.onionSupport chat snapshot · 2025-03-14 00:00 -
vnsggttwhcofyeh3nxoynxtg5mk5xl4cd7e3c4x62aqb2rj4rfjh3eqd.onionHello snapshot · 2026-09-22 20:28 -
dhnsppqjaaa22lsqxl2tfhji4ca43743kubltnodvsft3hkvai77p6ad.onionAiLock Data Leaks snapshot · 2026-09-23 03:01 -
qvqoau7353xe7wm3z6fzxn33q63ck7cys56wsbx25c22fnxyu4fzhnyd.onionHello snapshot · 2026-09-22 17:27 -
ejqsesb5cgero35i7ujerpuslbokhuwl3dqgsrg44bzamamccf7fw3ad.onionHello snapshot · 2026-09-22 20:30 -
eddo6w66t6t4kribwjbxvtehtsny4g6j2a5gj6pzivivcu5nywhegtqd.onion404 Not Found snapshot · 2026-09-22 20:00 -
wqse4qzvrtbg5o3evt2eexovcilxpvlsopwvpu7toimx64njqekzuqid.onion404 Not Found snapshot · 2026-09-22 19:21 -
pptiuraybrwacfl5v2qmzknenqxwt5eojtbh5cxxejaq3oo4bidkv7id.onion404 Not Found snapshot · 2026-09-22 17:10 -
ccpgp25zc37xccprbjr46iurz5c5awhqxltm6xn7nef7dxpsyegwncid.onion404 Not Found snapshot · 2026-09-22 20:04 -
q37z64a4j7455p6zcdxfpqrrgctmd46vaz2uejsqgxbmrcjbd4w3fqid.onion404 Not Found snapshot · 2026-09-22 21:00 -
44ga7x7kicz2bbxaohdfw5iw6j7dgg4kyctwtf4kh6gsxifbah4jv4ad.onion404 Not Found snapshot · 2026-09-22 20:16 -
b26gczu5dbhaovnkp5c3ef3vdphqxj64z4nwzvfdabplbptgp56gsdyd.onion404 Not Found snapshot · 2026-09-22 20:08 -
x7ghos27bltjtfombanecwgynfk4jw53ewkhzfnb5f27qmuquxwzhyad.onionHello snapshot · 2026-09-22 20:11 -
x7ghos27bltjtfombanecwgynfk4jw53ewkhzfnb5f27qmuquxwzhyad.onion404 Not Found snapshot · 2026-09-22 20:13 -
epnsv5xaxnrks5yliq5wlthbmdlidkjddon3rx5llftx4ueiwfzdx6ad.onion404 Not Found snapshot · 2026-09-22 20:13 -
to3odzfolkvhkj3jf5oo3qq5hvdycy5n5n6bi564yrxdgavnwv5znjqd.onion404 Not Found snapshot · 2026-09-22 19:12 -
qcncet2rpvs3t5lnvuzzth3vbro46snkylgyqx3igdnb5bv324nzojqd.onion404 Not Found snapshot · 2026-09-22 20:20 -
woed7o3il2jrxzczupntvhutc2ogs5otn6ekgoya6qo33qcuhomkhwad.onion404 Not Found snapshot · 2026-09-22 20:10 -
27kmvzlfn3dpb6s4zq3qknqpcbrk5qzhwmg5awhjmu3m2okgpd4pgrid.onion404 Not Found snapshot · 2026-09-22 20:11 -
s5v5hvtk3oyxg3m6afgxeuwlasqku3adeosv7kwwjfvhf22vqiwotrqd.onion404 Not Found snapshot · 2026-09-22 18:03 -
tsz2oqrfnyik3vtcx5rzubfuam3n5kapvkkagqr7yzxdxvdhehjxghqd.onion404 Not Found snapshot · 2026-09-22 20:06 -
s5v5hvtk3oyxg3m6afgxeuwlasqku3adeosv7kwwjfvhf22vqiwotrqd.onionHello snapshot · 2026-09-18 03:04 -
mbqmgrf2kvabejqmoh4kl5tw5fko5pphzmmlbxhgjp5ar5ret7qpobad.onionHello snapshot · 2026-09-22 20:16 -
tgyvw6pui3apxlezhiht5ubcmbm6fzn5klh2fi6qcqbvqhhfkyhnejad.onionHello snapshot · 2026-09-22 18:29 -
dwwnfgp43qjp5cy7n3ab6g5ubdxk4jkma37oykt6loeet7cyadtty5qd.onionHello snapshot · 2026-09-22 18:01 -
fgx4uh7pzf4xr7k56opyfsy7qmg64xisiv5scgcadaddur7qiv6t3yyd.onionHello snapshot · 2026-09-22 20:10 -
46vfmzfh3uxc3ojn6z267jmiytfhxzq4x7vvnqtycu5wa6hh3jl2hjyd.onionHello snapshot · 2026-09-18 01:01 -
tsz2oqrfnyik3vtcx5rzubfuam3n5kapvkkagqr7yzxdxvdhehjxghqd.onionHello snapshot · 2026-09-22 20:02 -
27kmvzlfn3dpb6s4zq3qknqpcbrk5qzhwmg5awhjmu3m2okgpd4pgrid.onionHello snapshot · 2026-09-22 20:27 -
woed7o3il2jrxzczupntvhutc2ogs5otn6ekgoya6qo33qcuhomkhwad.onionHello snapshot · 2026-09-22 19:15
Recent victims
The 50 most recent victims claimed by AILOCK. Total in the index: 51.
| Date listed | Victim | Description |
|---|---|---|
| 2026-08-26 | Morgan Services | |
| 2026-08-26 | Hamilton | |
| 2026-08-13 | DAISEN | |
| 2026-08-13 | Yaomasa | |
| 2026-07-15 | Nihon Kotsu Co., Ltd. | |
| 2026-07-15 | Solid Advance Inc. | |
| 2026-07-15 | Ferrovial | |
| 2026-07-14 | WBF Construction | |
| 2026-07-09 | Pinturas Prisa | |
| 2026-07-07 | Studio Sardano | |
| 2026-07-07 | Richmont Graduate University | |
| 2026-06-26 | Hokua | |
| 2026-06-15 | Röben Tonbaustoffe GmbH | |
| 2026-06-04 | Groupe Sécurité CLB | |
| 2026-06-01 | Schneebeli | |
| 2026-05-29 | Restorative Therapies, Inc. | |
| 2026-05-24 | Artso International, Inc. | |
| 2026-05-18 | Design Engineering & Consulting | |
| 2026-05-18 | Jazz Hipster | |
| 2026-05-11 | Accretech America Inc. | |
| 2026-05-02 | Site Design Group | |
| 2026-04-27 | Raich Sp. z o.o. | |
| 2026-04-23 | Mother's Market & Kitchen | |
| 2026-04-22 | PremCom | |
| 2026-04-10 | Alvi Associates | |
| 2026-04-03 | Berning & Söhne GmbH | |
| 2026-04-03 | Piet Vijverberg | |
| 2026-03-17 | Solutions Extreme Technology | |
| 2026-03-12 | England Hockey | |
| 2026-03-09 | Johnson Vollmerhausen & Gates | |
| 2026-03-09 | Netwerk NV | |
| 2026-03-09 | Eeyou Communications Network | |
| 2026-03-09 | Transsion | |
| 2026-03-03 | Demanor | Date: Coming soon Demanor AS specializes in providing customized go… |
| 2026-03-03 | Aaronson Rappaport Feinstein & Deutsch | Date: Coming soon Aaronson Rappaport Feinstein and Deutsch, LLP is … |
| 2026-03-03 | Dallas Regional Chamber | Date: 2026-01-24 The Dallas Regional Chamber is a prominent busines… |
| 2026-03-03 | ShopBot Tools | Date: 2026-01-16 ShopBot Tools is a leading manufacturer of high-qu… |
| 2026-03-03 | Navicore Solutions | Date: 2026-01-11 Navicore Solutions strengthens the well-being of i… |
| 2026-03-03 | Professional Retail Outlet Services | Date: 2026-01-09 PROS specializes in facilities management and main… |
| 2026-03-03 | S&R Compression, LLC | Date: 2026-01-10 S&R Compression is an oil & energy company offerin… |
| 2026-03-03 | Emanuelson-Podas | Date: 2026-01-10 Emanuelson-Podas, Inc. is a mechanical, electrical… |
| 2026-03-03 | ELO Digital Office | Date: Coming soon ELO Digital Office, founded in 1996 and headquart… |
| 2026-03-03 | Promotion Management Center | Date: 2025-10-14 Founded in 1983, Promotion Management Center, Inc.… |
| 2026-03-03 | Sterling Industries | Date: 2025-10-11 Sterling Industries is a North American-based cont… |
| 2026-03-03 | Raw Seafoods | Date: 2025-07-24 Raw Seafoods, Inc. is a family owned and operated … |
| 2026-03-03 | FUJIFILM Speciality Ink Systems | Date: 2025-07-21 FUJIFILM Speciality Ink Systems Ltd is a company t… |
| 2026-03-03 | Lewis Drug | Date: 2025-07-06 Founded in 1942, Lewis Drug owns and operates a ch… |
| 2026-03-03 | HomeSite Services | HomeSite Services Inc., a residential, commercial and retail services … |
| 2026-03-03 | Revival Animal Health | Revival Animal Health was founded in 1989 by Dr. Roy Nielsen, Jr., aff… |
| 2026-03-03 | AJ Networks | AJ Networks Co. Ltd is a company that operates in the Other Rental Sto… |
CONFIRMED ATTACKS
Ailock confirmed attacks: 7 verified incidents
Ransomnews has verified 7 Ailock incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from February 2026 to August 2026. Japan accounts for 3 of them (43%), with victims recorded in 4 countries in total. The most affected sector is manufacturing, at 2 confirmed victims. Where a figure was disclosed (1 case), these incidents account for 145 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Ailock incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| August 2026 | Daisen Co., Ltd. | Manufacturing | Toyohashi, Japan | — | Unknown | Source |
| July 2026 | Solid Advance Co., Ltd. | Technology | Tokyo, Japan | — | Unknown | Source |
| July 2026 | Nihon Kotsu Co., Ltd. | Transportation | Tokyo, Japan | — | Unknown | Source |
| May 2026 | Accretech America Inc. | Manufacturing | Texas, United States | — | Unknown | Source |
| March 2026 | Piet Vijverberg | Retail | Monster, Netherlands | — | Unknown | Source |
| March 2026 | England Hockey | Other | Marlow, United Kingdom | — | Unknown | Source |
| February 2026 | Johnson, Vollmerhausen & Gates, PLLC | Finance | North Carolina, United States | 145 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Ailock's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.