Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

AVOSLOCKER · Threat actor profile

THREAT ACTOR

AVOSLOCKER_

Dormant

AVOSLOCKER is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of AVOSLOCKER, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

141 Victims tracked
0 / 2 Active mirrors
2021-01-01 First listing
2023-05-11 Most recent

Victims by year

  • 2023 28
  • 2022 93
  • 2021 20

Leak site mirrors

2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion DDOS Protection snapshot · 2023-07-08 02:07
  • avosjon4pfh3y7ew3jdwz6ofw7lljcxlbk7hcxxmnxlh5kvf2akcqjad.onion snapshot · 2024-12-12 16:25

Recent victims

The 50 most recent victims claimed by AVOSLOCKER. Total in the index: 141.

Date listed Victim Description
2023-05-11 Bluefield College 1.2 TB data from a college with cyber insurance policy that doesn't ca…
2023-04-30 VMedia Inc Active Directory password hashes leaked from NTDS.dit format iptvoffic…
2023-04-30 SunPower Marine Active Directory password hashes leaked from NTDS.dit format sunpower.…
2023-04-30 Laragh Courseware Active Directory password hashes leaked from NTDS.dit format domain1.l…
2023-04-30 Pembina County Memorial Hospital A data breach occurred at Pembina County Memorial Hospital! The sensit…
2023-04-30 DiJones Real Estate 125 GB data exfiltrated including Payroll, HR, Marketing, Finance. F…
2023-04-30 Roseman University Student admissions data ready to leak. When you decide to pay us, emai…
2023-04-11 Accolade Group Inc Levelwear STOLEN DATA download proof tree files: https://dropmefiles.com.ua/ua/Z…
2023-04-11 Zeller Headquarters: 101 E Kennedy Blvd Ste 1700, Tampa, Florida, 33602, Unit…
2023-04-11 Tip Top Poultry Headquarters: 327 Wallace Rd, Marietta, Georgia, 30062, United States …
2023-03-20 Open MRI Bala Open MRI of Bala Cynwyd is the premier, patient friendly Open MRI cent…
2023-03-20 Title Cash Now TITLECASH NOW.COM offers affordable title loans and title pawns. We al…
2023-03-20 Entigrity Solutions Entigrity is an offshore staffing company based out of Sugar Land, Tex…
2023-03-20 Aces Electronic Co Ltd Aces Electronic Co., Ltd. Specializes in connectors for consumer produ…
2023-03-20 Desman Design Management We gladly welcome Desman.com, yet another loser, to our blog. DESMAN …
2023-02-23 California Northstate University We have Student admissions data include Name, Social Security Number, …
2023-02-14 Memtech Acoustical Memtech Acoustical is your 'one-stop' source for acoustic services, no…
2023-02-14 Global Mining Products Global Mining's Product Catalog is available for download. MINExpo 201…
2023-02-14 Buckeye Packaging Buckeye Packaging offers high-quality custom packaging solutions in a …
2023-02-14 Wesco Turf Finance, HR, Corporate files present in data leak We are an exclusive…
2023-02-14 CannonDesign Employees: 1,100 | Revenue: $279.8M | Site: www.cannondesign.com Exfil…
2023-02-14 Schandy We have more than 100GB Data(Employers Data,CVs,Passports,HR,Confident…
2023-02-14 Ultralife Corporation Publicly traded stock as ULBI. Client information, design, manufacture…
2023-02-14 Hamilton Parker 1865 LEONARD AVENUE COLUMBUS, OH 43219 614-358-7800
2023-02-14 Mitchell Lewis Staver Mitchell Lewis & Staver Is A Proud Distributor Of Over 75 Brands. 9939…
2023-01-09 Arizona Labor Force Hiring Arete Advisors to waste our time will lead to your data being l…
2023-01-09 Cambian Group Includes data from Care Tech Holdings PLC (parent holding company, car…
2023-01-07 Corporate Interiors Inc Corporate Interiors - Steelcase office furniture - Delaware and Philad…
2022-10-04 Hughes Systems Industrial All company projects includes drawings, contracts, and all details emp…
2022-10-04 DLS Motors We downloaded 50GB of internal files from DLS Motors. -- Just 83 years…
2022-10-04 Cosmopoint College We downloaded about 80 gigabytes of internal school documents, includi…
2022-10-04 ALVAC SA Website - https://alvac.es Company name: ALVAC S.A. Companies System A…
2022-09-19 Zeus Scientific Inc https://www.zeusscientific.com/about Zeus Scientific, Inc. manufacture…
2022-09-17 Emtec Inc Global IT company with terrible IT security. How can Emtec secure clie…
2022-09-17 American International Industry The leading manufacturer and distributor of innovative, quality beauty…
2022-09-14 Our Lady of Lake University Our Lady of the Lake University, founded in 1895 by the Congregation o…
2022-09-14 Paul Smiths College At Paul Smith's College, it's about the experience. We are the only fo…
2022-09-14 Northwest University Confidential, taxation, and financial data
2022-09-10 Xybion Xybion's Emidence TM platform satisfies our current and evolving futur…
2022-09-07 TeladanPrima Argo Group 750GB+ of stolen data include contracts, confidential , intellectual p…
2022-09-07 Sunland Asphalt And Construction Human Resources, Projects, Documents, and more. If Sunland Asphalt ref…
2022-09-07 Stratford University samples of: Confidential agreements Military personnel (white house …
2022-09-05 SCAD EDU 1 database, filelist, all email/phone leaked in sample! Everything lea…
2022-09-05 Truckslogic Documents include Legal, Financials, passports, licenses Truckslogic …
2022-08-30 Transform Data Into Insight More Than 50GB Important DATA Stolen Will be Publish
2022-08-30 Los Alamos Nature Center As a financial cooperative, Los Alamos Schools Credit Union provides f…
2022-08-30 Mount Vernon Mills stablished in 1947 and headquartered in Mauldin, South Carolina, Mount…
2022-08-30 Khoemacau Copper Mining ALL Active Directory domain hashes leaked!!! Format: kcm.local\tshiamo…
2022-08-30 The Brigantine The Brigantine Restaurants are a San Diego favorite for fresh seafood,…
2022-08-23 Garnica Plywood WILL LEAK ALL DATA SEPTEMBER 1, SAMPLE INCLUDE CONTACT At Garnica, we …

CONFIRMED ATTACKS

Avoslocker confirmed attacks: 36 verified incidents

Ransomnews has verified 36 Avoslocker incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from July 2021 to December 2023. United States accounts for 26 of them (72%), with victims recorded in 10 countries in total. The most affected sector is education, at 9 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 3; the outcome is unrecorded in the remaining 33. Where a figure was disclosed (21 cases), these incidents account for 1,641,013 exposed records.

36Verified incidents
10Countries
2021–2023Active range
0%Paid, where outcome known

Confirmed victims by year

  • 202112
  • 202214
  • 202310

Most affected sectors

  • Education9
  • Healthcare8
  • Transportation3
  • Service3
  • Manufacturing3
  • Finance2
  • Retail2
  • Construction2

Most affected countries

  • United States26
  • United Kingdom2
  • Canada1
  • Belgium1
  • Turkey1
  • Spain1
  • Taiwan1
  • Saudi Arabia1

Verified Avoslocker incidents

DateOrganisationSector LocationRecordsRansom paidSource
December 2023 Arizona Labor Force, Inc., Labor Systems, Inc. Service Arizona, United States — Unknown Source
April 2023 Pembina County Memorial Hospital Healthcare North Dakota, United States 23,811 Unknown Source
April 2023 Roseman University of Health Sciences Education Nevada, United States — Unknown Source
April 2023 Bluefield University Education Virginia, United States 23,195 Unknown Source
April 2023 Emmanuel College Education Massachusetts, United States 89,064 Unknown Source
March 2023 Methodist Family Health Healthcare Arkansas, United States 5,259 Unknown Source
February 2023 California Northstate University Education California, United States 5,745 Unknown Source
January 2023 The Cannon Corporation dba CannonDesign Service New York, United States 13,049 Unknown Source
January 2023 Cambian Group Healthcare Potters Bar, United Kingdom — Unknown Source
January 2023 Mitchell Lewis and Staver Company Manufacturing Oregon, United States — Unknown Source
September 2022 Sunland Asphalt and Construction, LLC Construction Arizona, United States 7,884 Unknown Source
September 2022 Emtec, Inc. Technology Florida, United States 8,849 Unknown Source
August 2022 Our Lady of the Lake University Education Texas, United States 41,826 Unknown Source
August 2022 Paul Smith's College Education New York, United States 10,615 Unknown Source
August 2022 CASA Retail Eindhoven, Netherlands — Unknown Source
August 2022 Savannah College of Art and Design (SCAD) Education Georgia, United States 16,890 No Source
August 2022 Mount Vernon Mills, Inc. Manufacturing South Carolina, United States 22,859 Unknown Source
May 2022 Collège Canadien MontMorency Education Quebec, Canada — Unknown Source
April 2022 Public Employees Credit Union Finance Texas, United States 28,606 Unknown Source
April 2022 Christus Health Healthcare Texas, United States 842,874 Unknown Source
April 2022 Blume Global, Inc. Technology California, United States 205 Unknown Source
March 2022 McKenzie Health System Healthcare Michigan, United States 51,040 No Source
January 2022 Jacksonville Spine Center, P.A. Healthcare Florida, United States 38,000 Unknown Source
January 2022 Avamere Health Services, LLC Healthcare Oregon, United States 380,984 Unknown Source
December 2021 48forty Transportation Texas, United States 13,404 Unknown Source
November 2021 Beaverhead County High School Education Montana, United States — No Source
October 2021 GIGABYTE Manufacturing Taipei, Taiwan — Unknown Source
August 2021 Pacific City Bank Finance California, United States 15,000 Unknown Source
August 2021 Moorfields Eye Hospital Healthcare Dubai, United Arab Emirates — Unknown Source
July 2021 On Logistics Services Algeciras, S.L Transportation Algeciras, Spain — Unknown Source
July 2021 Home in Brussels Service Brussels, Belgium — Unknown Source
July 2021 Eileen Fisher Retail New York, United States 1,854 Unknown Source
July 2021 Breydons Solicitors Legal Norwich, United Kingdom — Unknown Source
July 2021 Artas Holding/Artas Insaat Construction Istanbul, Turkey — Unknown Source
July 2021 Arabian Cargo Group Transportation Riyadh, Saudi Arabia — Unknown Source
July 2021 City of Geneva Government Ohio, United States — Unknown Source

Claimed vs confirmed. The figures above the fold on this page come from Avoslocker's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,613 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links; when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.