// THREAT ACTOR
MOUNTLOCKER_
UnknownMOUNTLOCKER is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of MOUNTLOCKER — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
Victims by year
- 2021 18
Recent victims
The 50 most recent victims claimed by MOUNTLOCKER. Total in the index: 18.
| Date listed | Victim | Description |
|---|---|---|
| 2021-09-09 | Memry Corporation | |
| 2021-09-09 | ThyssenKrupp System Engineering | |
| 2021-09-09 | Century 3, Inc. | |
| 2021-09-09 | Amey plc | |
| 2021-09-09 | Transtar1 | |
| 2021-09-09 | Wasserstorm | |
| 2021-09-09 | MERSEN | |
| 2021-09-09 | Geotech Engineering and Testing | |
| 2021-09-09 | Laboratorios SMA S.A.C. | |
| 2021-09-09 | ECU Worldwide | |
| 2021-09-09 | Makalot | |
| 2021-09-09 | Gunnebo AB | |
| 2021-09-09 | Enerstar Rentals & Services | |
| 2021-09-09 | Forrester Construction | |
| 2021-09-09 | Dassault Falcon Jet | |
| 2021-09-09 | Homeland Title | |
| 2021-09-09 | FAPS Inc. | |
| 2021-09-09 | Nachi America Inc. |