THREAT ACTOR
AVOSLOCKER_
DormantAVOSLOCKER is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of AVOSLOCKER, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2023 28
- 2022 93
- 2021 20
Leak site mirrors
2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onionDDOS Protection snapshot · 2023-07-08 02:07 -
avosjon4pfh3y7ew3jdwz6ofw7lljcxlbk7hcxxmnxlh5kvf2akcqjad.onionsnapshot · 2024-12-12 16:25
Recent victims
The 50 most recent victims claimed by AVOSLOCKER. Total in the index: 141.
| Date listed | Victim | Description |
|---|---|---|
| 2023-05-11 | Bluefield College | 1.2 TB data from a college with cyber insurance policy that doesn't ca… |
| 2023-04-30 | VMedia Inc | Active Directory password hashes leaked from NTDS.dit format iptvoffic… |
| 2023-04-30 | SunPower Marine | Active Directory password hashes leaked from NTDS.dit format sunpower.… |
| 2023-04-30 | Laragh Courseware | Active Directory password hashes leaked from NTDS.dit format domain1.l… |
| 2023-04-30 | Pembina County Memorial Hospital | A data breach occurred at Pembina County Memorial Hospital! The sensit… |
| 2023-04-30 | DiJones Real Estate | 125 GB data exfiltrated including Payroll, HR, Marketing, Finance. F… |
| 2023-04-30 | Roseman University | Student admissions data ready to leak. When you decide to pay us, emai… |
| 2023-04-11 | Accolade Group Inc Levelwear | STOLEN DATA download proof tree files: https://dropmefiles.com.ua/ua/Z… |
| 2023-04-11 | Zeller | Headquarters: 101 E Kennedy Blvd Ste 1700, Tampa, Florida, 33602, Unit… |
| 2023-04-11 | Tip Top Poultry | Headquarters: 327 Wallace Rd, Marietta, Georgia, 30062, United States … |
| 2023-03-20 | Open MRI Bala | Open MRI of Bala Cynwyd is the premier, patient friendly Open MRI cent… |
| 2023-03-20 | Title Cash Now | TITLECASH NOW.COM offers affordable title loans and title pawns. We al… |
| 2023-03-20 | Entigrity Solutions | Entigrity is an offshore staffing company based out of Sugar Land, Tex… |
| 2023-03-20 | Aces Electronic Co Ltd | Aces Electronic Co., Ltd. Specializes in connectors for consumer produ… |
| 2023-03-20 | Desman Design Management | We gladly welcome Desman.com, yet another loser, to our blog. DESMAN … |
| 2023-02-23 | California Northstate University | We have Student admissions data include Name, Social Security Number, … |
| 2023-02-14 | Memtech Acoustical | Memtech Acoustical is your 'one-stop' source for acoustic services, no… |
| 2023-02-14 | Global Mining Products | Global Mining's Product Catalog is available for download. MINExpo 201… |
| 2023-02-14 | Buckeye Packaging | Buckeye Packaging offers high-quality custom packaging solutions in a … |
| 2023-02-14 | Wesco Turf | Finance, HR, Corporate files present in data leak We are an exclusive… |
| 2023-02-14 | CannonDesign | Employees: 1,100 | Revenue: $279.8M | Site: www.cannondesign.com Exfil… |
| 2023-02-14 | Schandy | We have more than 100GB Data(Employers Data,CVs,Passports,HR,Confident… |
| 2023-02-14 | Ultralife Corporation | Publicly traded stock as ULBI. Client information, design, manufacture… |
| 2023-02-14 | Hamilton Parker | 1865 LEONARD AVENUE COLUMBUS, OH 43219 614-358-7800 |
| 2023-02-14 | Mitchell Lewis Staver | Mitchell Lewis & Staver Is A Proud Distributor Of Over 75 Brands. 9939… |
| 2023-01-09 | Arizona Labor Force | Hiring Arete Advisors to waste our time will lead to your data being l… |
| 2023-01-09 | Cambian Group | Includes data from Care Tech Holdings PLC (parent holding company, car… |
| 2023-01-07 | Corporate Interiors Inc | Corporate Interiors - Steelcase office furniture - Delaware and Philad… |
| 2022-10-04 | Hughes Systems Industrial | All company projects includes drawings, contracts, and all details emp… |
| 2022-10-04 | DLS Motors | We downloaded 50GB of internal files from DLS Motors. -- Just 83 years… |
| 2022-10-04 | Cosmopoint College | We downloaded about 80 gigabytes of internal school documents, includi… |
| 2022-10-04 | ALVAC SA | Website - https://alvac.es Company name: ALVAC S.A. Companies System A… |
| 2022-09-19 | Zeus Scientific Inc | https://www.zeusscientific.com/about Zeus Scientific, Inc. manufacture… |
| 2022-09-17 | Emtec Inc | Global IT company with terrible IT security. How can Emtec secure clie… |
| 2022-09-17 | American International Industry | The leading manufacturer and distributor of innovative, quality beauty… |
| 2022-09-14 | Our Lady of Lake University | Our Lady of the Lake University, founded in 1895 by the Congregation o… |
| 2022-09-14 | Paul Smiths College | At Paul Smith's College, it's about the experience. We are the only fo… |
| 2022-09-14 | Northwest University | Confidential, taxation, and financial data |
| 2022-09-10 | Xybion | Xybion's Emidence TM platform satisfies our current and evolving futur… |
| 2022-09-07 | TeladanPrima Argo Group | 750GB+ of stolen data include contracts, confidential , intellectual p… |
| 2022-09-07 | Sunland Asphalt And Construction | Human Resources, Projects, Documents, and more. If Sunland Asphalt ref… |
| 2022-09-07 | Stratford University | samples of: Confidential agreements Military personnel (white house … |
| 2022-09-05 | SCAD EDU | 1 database, filelist, all email/phone leaked in sample! Everything lea… |
| 2022-09-05 | Truckslogic | Documents include Legal, Financials, passports, licenses Truckslogic … |
| 2022-08-30 | Transform Data Into Insight | More Than 50GB Important DATA Stolen Will be Publish |
| 2022-08-30 | Los Alamos Nature Center | As a financial cooperative, Los Alamos Schools Credit Union provides f… |
| 2022-08-30 | Mount Vernon Mills | stablished in 1947 and headquartered in Mauldin, South Carolina, Mount… |
| 2022-08-30 | Khoemacau Copper Mining | ALL Active Directory domain hashes leaked!!! Format: kcm.local\tshiamo… |
| 2022-08-30 | The Brigantine | The Brigantine Restaurants are a San Diego favorite for fresh seafood,… |
| 2022-08-23 | Garnica Plywood | WILL LEAK ALL DATA SEPTEMBER 1, SAMPLE INCLUDE CONTACT At Garnica, we … |
CONFIRMED ATTACKS
Avoslocker confirmed attacks: 36 verified incidents
Ransomnews has verified 36 Avoslocker incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from July 2021 to December 2023. United States accounts for 26 of them (72%), with victims recorded in 10 countries in total. The most affected sector is education, at 9 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 3; the outcome is unrecorded in the remaining 33. Where a figure was disclosed (21 cases), these incidents account for 1,641,013 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Avoslocker incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| December 2023 | Arizona Labor Force, Inc., Labor Systems, Inc. | Service | Arizona, United States | — | Unknown | Source |
| April 2023 | Pembina County Memorial Hospital | Healthcare | North Dakota, United States | 23,811 | Unknown | Source |
| April 2023 | Roseman University of Health Sciences | Education | Nevada, United States | — | Unknown | Source |
| April 2023 | Bluefield University | Education | Virginia, United States | 23,195 | Unknown | Source |
| April 2023 | Emmanuel College | Education | Massachusetts, United States | 89,064 | Unknown | Source |
| March 2023 | Methodist Family Health | Healthcare | Arkansas, United States | 5,259 | Unknown | Source |
| February 2023 | California Northstate University | Education | California, United States | 5,745 | Unknown | Source |
| January 2023 | The Cannon Corporation dba CannonDesign | Service | New York, United States | 13,049 | Unknown | Source |
| January 2023 | Cambian Group | Healthcare | Potters Bar, United Kingdom | — | Unknown | Source |
| January 2023 | Mitchell Lewis and Staver Company | Manufacturing | Oregon, United States | — | Unknown | Source |
| September 2022 | Sunland Asphalt and Construction, LLC | Construction | Arizona, United States | 7,884 | Unknown | Source |
| September 2022 | Emtec, Inc. | Technology | Florida, United States | 8,849 | Unknown | Source |
| August 2022 | Our Lady of the Lake University | Education | Texas, United States | 41,826 | Unknown | Source |
| August 2022 | Paul Smith's College | Education | New York, United States | 10,615 | Unknown | Source |
| August 2022 | CASA | Retail | Eindhoven, Netherlands | — | Unknown | Source |
| August 2022 | Savannah College of Art and Design (SCAD) | Education | Georgia, United States | 16,890 | No | Source |
| August 2022 | Mount Vernon Mills, Inc. | Manufacturing | South Carolina, United States | 22,859 | Unknown | Source |
| May 2022 | Collège Canadien MontMorency | Education | Quebec, Canada | — | Unknown | Source |
| April 2022 | Public Employees Credit Union | Finance | Texas, United States | 28,606 | Unknown | Source |
| April 2022 | Christus Health | Healthcare | Texas, United States | 842,874 | Unknown | Source |
| April 2022 | Blume Global, Inc. | Technology | California, United States | 205 | Unknown | Source |
| March 2022 | McKenzie Health System | Healthcare | Michigan, United States | 51,040 | No | Source |
| January 2022 | Jacksonville Spine Center, P.A. | Healthcare | Florida, United States | 38,000 | Unknown | Source |
| January 2022 | Avamere Health Services, LLC | Healthcare | Oregon, United States | 380,984 | Unknown | Source |
| December 2021 | 48forty | Transportation | Texas, United States | 13,404 | Unknown | Source |
| November 2021 | Beaverhead County High School | Education | Montana, United States | — | No | Source |
| October 2021 | GIGABYTE | Manufacturing | Taipei, Taiwan | — | Unknown | Source |
| August 2021 | Pacific City Bank | Finance | California, United States | 15,000 | Unknown | Source |
| August 2021 | Moorfields Eye Hospital | Healthcare | Dubai, United Arab Emirates | — | Unknown | Source |
| July 2021 | On Logistics Services Algeciras, S.L | Transportation | Algeciras, Spain | — | Unknown | Source |
| July 2021 | Home in Brussels | Service | Brussels, Belgium | — | Unknown | Source |
| July 2021 | Eileen Fisher | Retail | New York, United States | 1,854 | Unknown | Source |
| July 2021 | Breydons Solicitors | Legal | Norwich, United Kingdom | — | Unknown | Source |
| July 2021 | Artas Holding/Artas Insaat | Construction | Istanbul, Turkey | — | Unknown | Source |
| July 2021 | Arabian Cargo Group | Transportation | Riyadh, Saudi Arabia | — | Unknown | Source |
| July 2021 | City of Geneva | Government | Ohio, United States | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Avoslocker's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.