Ransomware Group intelligence
Interlock
ActiveTrack Interlock with 23541 published victims and 72 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Interlock is tracked by Breach House as a ransomware group with 23541 published victims.
United States is currently the most targeted country in this dataset.
72 known leak locations are currently associated with this group.
Leak Status Distribution
66
- Leaked 58 87.9%
- Pending 7 10.6%
- Deleted 1 1.5%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (72)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 70 | Onion service | Up checked 2h ago | mfrgymzi6w34lmxojf7hgteoskqo6j5zelunqh3dwxcmz7bbacqzwcad.onion |
| Leak location 71 | Onion service | Up checked 2h ago | 2nv4huuzjbsqncvuepdmwneo6l4ocgtxzcgdau7obcvaqebkssfpz2ad.onion |
| Leak location 68 | Onion service | Up checked 2h ago | xkqqpb46vk7appesxtmotbrweogkux6gheyonqpk2dxbuqetgt3cvrad.onion |
| Leak location 69 | Onion service | Up checked 2h ago | sq5gowklqcw4uqwzdsebnpxaynffzctjs6r5mmzzpn6jn76au7qwexid.onion |
| Leak location 66 | Onion service | Up checked 2h ago | y2yplioc7ybrun2qb4opyc2vdt6lqtxvag3rocayyv2ekbtoa7kjo3qd.onion |
| Leak location 67 | Onion service | Up checked 2h ago | 5igtvs225ikh2svqvf7zkanyica5jz5p5db44fg2rwj7ifyjipvyimid.onion |
| Leak location 65 | Onion service | Up checked 2h ago | 6p6fubv4udi7kzgh4jojcplujeogmacclxmskfb3y6bknkh7zh7hohyd.onion |
| Leak location 63 | Onion service | Up checked 2h ago | zd4caqa225s2rs2nhst4y5nkt575ohdpfm6zwy6mug6js3izseli24qd.onion |
| Leak location 62 | Onion service | Up checked 2h ago | t26owzk2773mecpebt4l2eztx6lvn5642fn7annaynq7vwvb6wonkrid.onion |
| Leak location 61 | Onion service | Up checked 2h ago | 3kiwpavmpi2eyc2d4cbggo6s4fnodqzlhxirudruptvjx32wlxxzn6ad.onion |
| Leak location 59 | Onion service | Up checked 2h ago | pal3f65j4qj7b2hz2mlmimu4vhl4wz7sfdlvp3g2ry3qwk5nc6pbakid.onion |
| Leak location 56 | Onion service | Up checked 2h ago | pcixe2pw5ho6qpkjwbrsscvdcpzfj7vt3stvyde5ii5wdlqgvtyr4vad.onion |
| Leak location 57 | Onion service | Up checked 2h ago | ixybueqla5otlp5qfud5bcri2qoyxxhujwtrae5dkxnuo2eof3oliiyd.onion |
| Leak location 55 | Onion service | Up checked 2h ago | k6aw4if6phmqcdp5wzfdjfb3plmybzpkcssmgvv5nltv23tndvh4ewid.onion |
| Leak location 53 | Onion service | Up checked 2h ago | ex55if4jgsdyi6do4gtyzpishq2tvwatjrhoclqcihxcsipam3uxrryd.onion |
| Leak location 54 | Onion service | Up checked 2h ago | awlcpawkphkrrhg6jhwoz5nnrhzz5kfwq2tuzmteyrosgfcpbkisarqd.onion |
| Leak location 51 | Onion service | Up checked 2h ago | 3cpc3v57l7rstjtaelxgnlrzsolz7pd6ltsygjo2tjuonxteyaba2pid.onion |
| Leak location 50 | Onion service | Up checked 2h ago | efs3fkrjyvqsk7nugzteelo5i5jxoch5ziqhf37dzmmlmzzlymhawmid.onion |
| Leak location 45 | Onion service | Up checked 2h ago | x2ol75zago3z2nrp7lnmbcwoq3okiexuwi456oe6jqurbprg6lljz3yd.onion |
| Leak location 43 | Onion service | Up checked 2h ago | f53mekzwvscxejfqxtikrzcmqnd3bt5i4d7odvh62sir7eqhdwwjntad.onion |
| Leak location 1 | Onion service | Up checked 3h ago | ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion |
| Leak location 2 | Onion service | Up checked 3h ago | ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion |
| Leak location 52 | Web location | Up checked 3h ago | ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/leaks.php |
| Leak location 72 | Onion service | Down checked 2h ago | gpotnbhakwdnrcojjnr4msl3sl64a4gv2n4yizvmbsceiazpqq23s5yd.onion |
| Leak location 64 | Onion service | Down checked 2h ago | 2gvprypcd3wemjghnnassqtro7nwhocr5ry4bngx7x7xhks7f7oillqd.onion |
| Leak location 60 | Onion service | Down checked 2h ago | xyaaupqnht5foymeilb67uv5ljjod5o3uyq62llldv4r4jiqxj2nhoqd.onion |
| Leak location 58 | Onion service | Down checked 2h ago | nh2kwgilfzi5mngiiqtcuoueh2oy4dkjq5cnfnjymueoj654fi7qtpid.onion |
| Leak location 49 | Onion service | Down checked 2h ago | kcykitrgt5sceuap4wrgeqdx53z2kgailaa5a62qxmdl7mbqarfgt3id.onion |
| Leak location 48 | Onion service | Down checked 2h ago | hz7krqig75lgdzl7rtxynw26m3vornjl24ikeyqb5vagbae2iectorqd.onion |
| Leak location 47 | Onion service | Down checked 2h ago | 3ssy6kepkwajapmra262il4tnufgbujf2boz7odgigc3e46dzdqd6wad.onion |
| Leak location 46 | Onion service | Down checked 2h ago | pgjf3dfkamnprahggbw4yojyb7sot3no2glnbfwyzbzqbnaislpv52yd.onion |
| Leak location 44 | Onion service | Down checked 2h ago | hu5zd7ek6glyoke5kfc4mvt6s3cmia6ebtqptumvbogzdo2vrn5e7bid.onion |
| Leak location 41 | Onion service | Down checked 2h ago | efgmr2vxwynrn7vlemidwf4ffwl4vljsb4eusaz3bplwk3apthpkpsad.onion |
| Leak location 42 | Onion service | Down checked 2h ago | c7bgta4watnqu64jnfgp4tzvhfhxgwveqnes65q3mcu4f34xvn7rumad.onion |
| Leak location 40 | Onion service | Down checked 2h ago | 2tlkuy2qn7bfxyvbfpxqaqveoezctbrnk6yvbvin6dueiuk4rdoosyqd.onion |
| Leak location 38 | Onion service | Down checked 2h ago | qfxx5gxyh53a32itguxez6dqcsm3vkrron3nmxhzkn3g64qld5lijoyd.onion |
| Leak location 39 | Onion service | Down checked 2h ago | fbvrolfvadyhigunc5hfw5hextwqn4lvq7d5ieeivcizsxh3avn6dryd.onion |
| Leak location 36 | Onion service | Down checked 3h ago | x6obl6pfmqsasvwj72hr22s2mpsdaklwkoa46zk3h7kbkcznu6whdmad.onion |
| Leak location 37 | Onion service | Down checked 3h ago | 24nmjyf6g5otaydjtintzmqv3qme3fnrt62ui2anqdz2hmxnwps4e2ad.onion |
| Leak location 35 | Onion service | Down checked 3h ago | 3y5p4cq7bke5exre4smsgueqzfwdy7u4z3rp7o3dgxm27lhsx6vqraid.onion |
| Leak location 34 | Onion service | Down checked 3h ago | mpyeixjqjufjki2qg7dutvxk6tjjzv2jf7qc63bljzfqrtbjcdktziqd.onion |
| Leak location 33 | Onion service | Down checked 3h ago | ihbpu7nworzao2klqeeahnz7wcuavltny3p2cmfkhe5tko3vl3zcowyd.onion |
| Leak location 32 | Onion service | Down checked 3h ago | zsjvoqymwx5gdwntsrrk3pvnkfyoxy3knhoxitpdaobxznwc5iwcj4id.onion |
| Leak location 31 | Onion service | Down checked 3h ago | vhs6omcvvqdtmgae5cvpy4jfxfrw2l4b7e64j7fn7xeaqeppzab67oad.onion |
| Leak location 29 | Onion service | Down checked 3h ago | hhzt3me6rtxg5rwjbikojbxioosmiprsjrd25ovjhxirx4ocjdwuoqad.onion |
| Leak location 30 | Onion service | Down checked 3h ago | gobj3ph5sj332iithgescrsejiszhaey5l4ffwnou4nwanbcf37phdqd.onion |
| Leak location 27 | Onion service | Down checked 3h ago | pzbd27cw7pkctovnmfaoeldjf32bc63mwqwhcxcftkqntest2bkkuaid.onion |
| Leak location 28 | Onion service | Down checked 3h ago | glsvddrnd4qu56uhx65mrepgaoer6vtfr6q6qgsbpnml3b3fm2h7lcid.onion |
| Leak location 26 | Onion service | Down checked 3h ago | wp5yyng6znkcsijil5w4bug7b6uww573ut3czz3amjpfdusnuu4u5kad.onion |
| Leak location 25 | Onion service | Down checked 3h ago | j76ts5r62mwtfqg6t2po7komao65jzgglaavnvloeltfenazpt57vaad.onion |
| Leak location 24 | Onion service | Down checked 3h ago | f4fjja74gn766x5fwxqepl4aa7wyzuu3tj6fllt6oy6j5e27zxwskeid.onion |
| Leak location 23 | Onion service | Down checked 3h ago | d55ahmrs2mbfcmframropdz4epz3is77ex2fbkbowhrqtxv7knunkxqd.onion |
| Leak location 21 | Onion service | Down checked 3h ago | viqh6qmehdkpn7jrfhthyejxtg3gd5hg4bch7sjetvkdaipeu3k6anad.onion |
| Leak location 22 | Onion service | Down checked 3h ago | ycgykop5f4te6yaptg57ze75kgnqo6u2e3yyeo3hkjgjxakjx2g5ksqd.onion |
| Leak location 18 | Onion service | Down checked 3h ago | y3zfr23ubg7zvzdlo2incm55ro2ybtmzth67eklxpxo55aux2jiqpbid.onion |
| Leak location 19 | Onion service | Down checked 3h ago | u2q76zahlrpgvktr3i2j6o2emzcre67et2kvz43kj2gbrhokc2othqyd.onion |
| Leak location 20 | Onion service | Down checked 3h ago | 5s2rv76limdt3eelmoh2vw6xovckjl563tjdifplvyxezdchcyn5xxyd.onion |
| Leak location 16 | Onion service | Down checked 3h ago | vecdwhichsjnv3x7t5b4o2hk23iwjurmcp2wrwd25jp3smvsth6e6nid.onion |
| Leak location 15 | Onion service | Down checked 3h ago | sogw6fz6swsg42esmor63wj3iijpmoydt7sizwgzf2k6na6nglqt52ad.onion |
| Leak location 17 | Onion service | Down checked 3h ago | xqcx7b57dd5vrqllokebwuvub4hk3viktn4lsgyt2bg67oujd42xolqd.onion |
| Leak location 14 | Onion service | Down checked 3h ago | ph2ilpfayyumhbetpdu6zovwy4vvm7qz3puh7k4zbre7bsf4e4ym5lqd.onion |
| Leak location 12 | Onion service | Down checked 3h ago | k6oor2g5bfvdxhxr2g6fczu3iqldbzyavydk56lh6z7ex7n7wqg4eryd.onion |
| Leak location 13 | Onion service | Down checked 3h ago | ljurl2gqwtgfqzk6pkz5ggtdrdrpzpzzkdvf4jhpkk33dnwkcsmdi4ad.onion |
| Leak location 10 | Onion service | Down checked 3h ago | if6cf3llwqht3bs2glotrlsj4ayowc4pipadzbf7bkztln5ykifkjpyd.onion |
| Leak location 11 | Onion service | Down checked 3h ago | ir3oqafizlapipdyrebrfuk5bxd56zqjemljvfkeb42nzpxvkxwmqpqd.onion |
| Leak location 8 | Onion service | Down checked 3h ago | dnyyuk3nevegj37tnv3xav57c5twomc7uqsfbjlkwto3p4spzfop47qd.onion |
| Leak location 9 | Onion service | Down checked 3h ago | ewalffgokvo5x547bygn6c7ne56urhhwrl6q6t34fnryq65qf4oqnoqd.onion |
| Leak location 7 | Onion service | Down checked 3h ago | c4xaaynebochyp6ccvxi2bzbvncosdhqcb65cjuqwgqcljlul5gbrhyd.onion |
| Leak location 5 | Onion service | Down checked 3h ago | 6oqw2koek4nbmbb7ic3y4jr6scqsypg5en4h6mcqyrgg3jkny4sgaiyd.onion |
| Leak location 6 | Onion service | Down checked 3h ago | b5yuydwoxorp2qvirovzavbhpj72lcisv5unwblohkb6443u7m2mzuad.onion |
| Leak location 4 | Onion service | Down checked 3h ago | 523gzulwswe5tfevqlrxvqqh2fxo2mwrs2irnjel4mtu7qodgdu2ccyd.onion |
| Leak location 3 | Onion service | Down checked 3h ago | 4k6hj4ash2oo5svymxxrsycex3mdv5dqzom5rlyoojpe6map2lqgmqad.onion |
Top Activity Sectors (15)
- Education 48
- Services 23
- Communication / Marketing 21
- Manufacturing / Engineering 20
- Public Sector 18
- Finance / Legal / Insurance 17
- IT 17
- Healthcare / Pharma 16
- Retail / E-commerce 12
- Construction / Real Estate 11
- NGOs / Associations 6
- Not identified 5
- Agriculture / Food 3
- Hospitality / Food & Beverage / Tourism 2
- Transportation / Travel / Logistics 2
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Interlock, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
What they do: interlock leverages domain accounts harvested during initial access for persistence and privilege escalation.
What that means: Adversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1190 Exploit Public-Facing Application Initial Access
What they do: interlock exploits public-facing applications to gain initial access to victim networks.
What that means: Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
-
T1059.001 PowerShell Execution
What they do: interlock executes malicious commands via PowerShell scripts to stage payloads and evade detection.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: interlock disables or modifies security tools like EDR agents to hinder incident response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1110 Brute Force Credential Access
What they do: interlock performs brute force attacks against user accounts to obtain valid credentials.
What that means: Adversaries may use brute force techniques to gain access to accounts when passwords are unknown or when password hashes are obtained.
-
T1057 Process Discovery Discovery
What they do: interlock uses process discovery to identify critical services and processes for targeting.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: interlock moves laterally through SMB/Windows Admin Shares to access additional systems.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1567.002 Exfiltration to Cloud Storage Exfiltration
What they do: interlock exfiltrates sensitive victim data before deployment to enable double extortion.
What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: interlock encrypts victim data using custom ransomware binaries to maximize impact.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: interlock inhibits system recovery by destroying Volume Shadow Copies and backup mechanisms.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (17)
▼Software Interlock has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Defense evasion
ProcessHacker
ThreatFire System Monitor driver (BYOVD)
ThreatFire System Monitor driver
Discovery
Advanced Port Scanner
Azure Storage Explorer
Discovery & enumeration
Advanced Port Scanner
Azure Storage Explorer
Exfiltration
AZCopy
WinSCP
LOLBAS (living-off-the-land binaries)
PsExec
Networking & tunnelling
PuTTY
OffSec
Cobalt Strike
Offensive security tooling
Cobalt Strike
RMM Tools
AnyDesk
ScreenConnect
Remote monitoring & management
AnyDesk
ScreenConnect
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (4)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README__.txt
INTERLOCK - CRITICAL SECURITY ALERT
To Whom It May Concern,
Your organization has experienced a serious security breach. Immediate action is required to mitigate further risks. Here are the details:
THE CURRENT SITUATION
- Your systems have been infiltrated by unauthorized entities.
- Key files have been encrypted and are now inaccessible to you.
- Sensitive data has been extracted and is in our possession.
WHAT YOU NEED TO DO NOW
1. Contact us via our secure, anonymous platform listed below.
2. Follow all instructions to recover your encrypted data.
Access Point: http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/support/step.php
Use your unique Company ID: [snip]
DO NOT ATTEMPT:
- File alterations: Renaming, moving, or tampering with files will lead to irreversible damage.
- Third-party software: Using any recovery tools will corrupt the encryption keys, making recovery impossible.
- Reboots or shutdowns: System restarts may cause key damage. Proceed at your own risk.
HOW DID THIS HAPPEN?
We identified vulnerabilities within your network and gained access to critical parts of your infrastructure. The following data categories have been extracted and are now at risk:
- Personal records and client information
- Financial statements, contracts, and legal documents
- Internal communications
- Backups and business-critical files
We hold full copies of these files, and their future is in your hands.
YOUR OPTIONS
#1. Ignore This Warning:
- In 96 hours, we will release or sell your sensitive data.
- Media outlets, regulators, and competitors will be notified.
- Your decryption keys will be destroyed, making recovery impossible.
- The financial and reputational damage could be catastrophic.
#2. Cooperate With Us:
- You will receive the only working decryption tool for your files.
- We will guarantee the secure deletion of all exfiltrated data.
- All traces of this incident will be erased from public and private records.
- A full security audit will be provided to prevent future breaches.
FINAL REMINDER
Failure to act promptly will result in:
- Permanent loss of all encrypted data.
- Leakage of confidential information to the public, competitors, and authorities.
- Irreversible financial harm to your organization.
CONTACT US SECURELY
1. Install the TOR browser via https://torproject.org
2. Visit our anonymous contact form at http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/support/step.php
3. Use your unique Company ID: [snip]
4. Review a sample of your compromised data for verification.
5. Use a VPN if TOR is restricted in your area.
!!!OPEN_ME!!!.txt
Action Required: Data Breach Notification Your Data Is Now Beyond Your Control We have taken control of your systems, encrypted your critical files, and extracted sensitive data. This is a pivotal moment for your organization—your actions now will determine the outcome. --- What You Need to Understand Your data security was compromised because of insufficient protection. As a result: 1. All access to important files has been restricted through encryption. 2. We possess confidential business records, personal data, and other critical information. 3. If you do not respond within 72 hours, we will initiate the public release of your data, creating irreversible damage. --- The Risks You Face: Failure to act swiftly puts your organization at risk of: - Legal violations under GDPR, GLBA, CCPA, HIPAA, NYDFS Cybersecurity Regulation, and DPA 2018. - Financial penalties for failing to protect Non-Public Information (NPI). - Reputational harm as clients, partners, and the public lose trust in your ability to safeguard their data. --- What You Must Do Immediately: 1. Initiate Communication: - Access our recovery portal using TOR Browser. - Download TOR from [https://www.torproject.org](https://www.torproject.org). - Visit http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/chat.php, using your Organization ID [snip] to start the negotiation process. 2. Alternative Browser Access: - Use Chrome, Edge, or Firefox to open http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion.ly/chat.php - Enter your Organization ID [snip] to receive detailed recovery instructions. --- What Happens Next: - If we do not hear from you within 72 hours, your data will be exposed to the public and sold to interested parties. - The ensuing violations of laws such as GDPR and HIPAA will lead to significant penalties, lawsuits, and regulatory scrutiny. --- Your Responsibility: Your organization is fully accountable for protecting the data it collects. By neglecting this responsibility, you have allowed this situation to unfold. Your chance to regain control is limited—act decisively to avoid catastrophic outcomes.
FIRST_READ_ME.txt
Final Warning: Your Data Is at Risk To the Leadership of Your Organization We have encrypted your systems and extracted sensitive information from your network. Your organization's failure to prioritize cybersecurity has left critical data vulnerable, and now, the consequences are at hand. --- What You Need to Know: 1. We have seized key documents, customer information, and confidential business data. 2. Access to these files has been locked with advanced encryption. 3. Responsibility for this breach lies with your organization, as you are obligated by law to protect Non-Public Information (NPI). --- Legal and Financial Risks: If you fail to act within 72 hours, we will begin publishing your data on our leak platforms. The consequences will include: - Violations of laws such as GDPR, HIPAA, CCPA, GLBA, and NYDFS Cybersecurity Regulation. - Severe fines for non-compliance and lawsuits from affected parties. - Long-term reputational damage to your business, leading to client and partner losses. --- Your Actions: To prevent escalation, you must cooperate immediately. 1. Access our Recovery Platform via TOR Browser: - Download TOR from [https://www.torproject.org](https://www.torproject.org). - Open: http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/chat.php - Use your Organization ID [snip] to create a private negotiation chat. 2. Alternative Access for Regular Browsers: - Open Chrome, Edge, or Firefox. - Navigate to: http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion.ly/chat.php - Enter your Organization ID [snip] for instructions. --- Important Warning: - Do not attempt self-recovery; it will fail and lead to data corruption. - Avoid engaging third-party negotiators or law enforcement; this will void any possibility of resolution. - Remember, the data we hold could be used by regulators, competitors, or even the media, causing irreparable harm to your business. Time is of the essence. Every hour of inaction increases the likelihood of devastating consequences. Make the right decision secure your future by cooperating with us now.
READ_THIS_ONE_FIRST.txt
We have successfully breached your network, encrypted your files, and obtained highly sensitive data. This is the result of weak cybersecurity on your part. As of now, your access to critical business information has been revoked. The only way to regain control is through cooperation. If you fail to contact us within 72 hours, we will proceed to publish your data to the public, ensuring severe consequences for your organization. By not addressing this matter, you risk violating major laws such as GDPR, GLBA, HIPAA, CCPA, NYDFS Cybersecurity Regulation, and DPA 2018. Such violations can result in massive fines, lawsuits, and irreparable harm to your reputation. It is your organization`s responsibility to protect Non-Public Information (NPI); neglecting this duty has led to this situation. To resolve this issue, visit our secure negotiation portal using the TOR Browser. Download TOR from [https://www.torproject.org](https://www.torproject.org), and access http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/chat.php. Use your Organization ID [snip] to initiate communication. If you prefer, you can also use standard browsers like Chrome, Edge, or Firefox and go to http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion.ly/chat.php, where your ID will allow you to proceed. Do not attempt to recover files on your own or involve third parties, as these actions will void the opportunity to resolve this matter and could lead to permanent data loss. Failure to act will escalate the situation, exposing your data to competitors, regulators, and the media. Your future depends on your decision now-act responsibly before the deadline passes.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (23541)
Search, filter and paginate the victim timeline for Interlock. Showing 20301–20400 of 23541.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | General Formulations id32898 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related healthcare-oriented services. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim associated with the threat actor interlock. The listing type indicates a cybersecurity incident context where ransomware activity was observed or attributed to this organization within the healthcare and pharma domain. This entry serves to document the relationship between the entity, its operational sector, its geographic location, and the specific threat actor interlock. The description remains neutral, focusing solely on the verified listing classification without elaborating on unconfirmed incident details, data specifics, or recovery outcomes. |
||||||
| Ransomware | General Formulations id32898 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related services to support medical and pharmaceutical needs. The entity is cataloged as a ransomware victim within the threat-intelligence index, specifically associated with threat actor interlock. This listing type indicates a cybersecurity incident where the organization was targeted by ransomware activity linked to interlock. The description remains factual and neutral, focusing on the entity's sector, geographic location, listing classification, and associated threat actor without disclosing unverified incident details such as data stolen, ransom demands, or confirmed breach specifics. This entry serves to inform threat-intelligence consumers of the victim profile and actor correlation for monitoring and risk assessment. |
||||||
| Ransomware | General Formulations id32899 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations related to healthcare products or services. As a ransomware victim, this entity is documented within the threat-intelligence index under association with threat actor interlock. The listing type identifies the entity's role in the cybersecurity landscape as a victim of ransomware activity, contextualized by its sector and geographic location. This entry serves to catalog the relationship between the organization and the specified threat actor without disclosing unverified incident details. The description remains neutral and factual, adhering to threat-intelligence reporting standards for catalogued entities. |
||||||
| Ransomware | General Formulations id32899 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related healthcare-focused services. As a ransomware victim associated with the threat actor interlock, this entity is documented within the threat-intelligence index to reflect its exposure to cyber threats targeting healthcare and pharma organizations. The listing type identifies the entity as a victim of ransomware activity, contextualized by its sector, geographic location, and the specific threat actor interlock. This catalog entry serves to inform stakeholders about the relationship between the organization and the identified cyber threat actor without disclosing unverified incident details. The description adheres to neutral, authoritative reporting standards for threat-intelligence indexing. |
||||||
| Ransomware | General Formulations id32900 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing formulations and related services. As a ransomware victim associated with the threat actor interlock, this entity appears in the threat-intelligence index to document its exposure profile. The listing type identifies the organization as having experienced ransomware activity linked to interlock, contextualizing its security posture within the healthcare landscape. This entry serves to inform stakeholders about affected entities in critical sectors facing cyber threats from identified actors. The description remains factual and neutral, focusing solely on the entity's classification and association without speculating on incident details. |
||||||
| Ransomware | General Formulations id32901 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related healthcare-focused services. As a ransomware victim, this entity is documented within the threat-intelligence index under association with threat actor interlock. The listing type identifies the organization's exposure within cybersecurity threat records, reflecting its sector context and geographic location without disclosing unverified incident details. This description adheres to neutral, authoritative reporting standards for catalog inclusion, focusing on verified associations and sectoral classification. |
||||||
| Ransomware | General Formulations id32904 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing formulations and related services to support medical and pharmaceutical applications. The entity is cataloged in this threat-intelligence index under the listing type ransomware victim, associated with the threat actor interlock. This designation reflects the cybersecurity context in which the organization was identified within the index. No specific incident details, such as data stolen, breach confirmation, or financial impact, are included per strict factual constraints. The entry serves to document the relationship between the entity, its sector, location, and the associated threat actor for catalog and intelligence purposes. |
||||||
| Ransomware | General Formulations id32905 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, focusing on general formulations and related healthcare offerings. As a ransomware victim, this entity is documented within a threat-intelligence index linking it to the interlock threat actor group. The listing type identifies its involvement in a cyber incident without disclosing specific technical details, data breach specifics, or confirmed impact metrics. This catalog entry supports security professionals in understanding ransomware exposure patterns within sensitive healthcare and pharma environments. The record remains neutral, reflecting the association without asserting unverified claims about stolen data, ransom demands, or operational disruption. |
||||||
| Ransomware | General Formulations id32905 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare-focused services. As cataloged in our threat-intelligence index, the entity is classified as a ransomware victim associated with the threat actor interlock. This listing reflects the organization's inclusion in threat intelligence records tied to this specific adversary group, contextualized by its sector and geographic location. The description remains neutral and factual, focusing on the entity's classification and associated threat actor without extrapolating beyond verified index data. |
||||||
| Ransomware | General Formulations id32905 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the US healthcare and pharmaceutical sector, providing general formulations and related healthcare solutions tailored to clinical and commercial needs. This entity has been cataloged as a ransomware victim within our threat-intelligence index, with the associated threat actor and source identified as interlock. The listing reflects the entity's status in relation to this specific cyber threat event, contextualized by its industry exposure and geographic location. Our catalog maintains neutral, factual records for threat-intelligence professionals analyzing ransomware impacts across critical sectors. |
||||||
| Ransomware | General Formulations id32905 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing specialized formulation and related services to support medical and pharmaceutical development workflows. As a ransomware victim, this entity is documented within the threat-intelligence index under the associated threat actor interlock. The listing type identifies the organization as a target of ransomware activity, reflecting the persistent cybersecurity risks facing healthcare and pharma entities globally. This entry serves as a reference point for threat analysts tracking adversary campaigns and victim profiles across critical infrastructure sectors. The record neutrally states that generalformulations.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | General Formulations id32905 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing formulations and related services aligned with medical and pharmaceutical industry needs. This entity is cataloged as a ransomware victim within the threat-intelligence index, specifically associated with the threat actor interlock. The listing type reflects the nature of the security incident documented in relation to this organization and its operational environment. All details remain strictly factual regarding the entity's classification and associated threat actor, without elaboration on unverified breach specifics. This entry supports comprehensive threat monitoring and sector-focused cybersecurity intelligence. |
||||||
| Ransomware | General Formulations id32907 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related healthcare products or services. As a ransomware victim, this entity is documented in the threat-intelligence index under association with threat actor interlock. The listing type identifies the entity's status within cybersecurity incident records, reflecting the nature of its exposure without disclosing unverified breach details. This catalog entry supports threat analysts and defenders in tracking ransomware-related entities across critical sectors. The record remains factual and neutral, noting only the association with interlock as the attributed threat actor. |
||||||
| Ransomware | General Formulations id32907 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare or pharmaceutical services. The entity is cataloged in this threat-intelligence index under the listing type ransomware victim, associated with the threat actor interlock. This designation reflects its inclusion within records documenting cybersecurity incidents involving this specific actor group. The description avoids speculation regarding breach details, data exposure, or operational impact, focusing solely on the verified association and sector context provided by the index. Readers seeking threat context for healthcare entities should consult this entry alongside complementary intelligence sources. |
||||||
| Ransomware | General Formulations id32908 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare or pharmaceutical services. As a designated ransomware victim in this threat-intelligence index, the entity is associated with the threat actor interlock. The listing reflects observed threat-intelligence data concerning this organization and its connection to interlock's activity. This description maintains neutrality regarding incident specifics, as confirmed details such as data scope, breach confirmation, or operational impact are not provided here. The catalog entry documents the entity's classification and its association with the identified threat actor within the ransomware victim context. |
||||||
| Ransomware | General Formulations id32908 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing formulations and associated services aligned with industry requirements. The entity is cataloged as a ransomware victim within a threat-intelligence index, specifically associated with the threat actor interlock. This listing type indicates a cybersecurity incident context tied to the organization's operational environment and sector exposure. The description remains neutral regarding incident details, focusing solely on the verified association and sector classification for catalog purposes. |
||||||
| Ransomware | General Formulations id32908 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing formulations and related services aligned with industry requirements. As cataloged in our threat-intelligence index, the entity is classified as a ransomware victim associated with the threat actor interlock. The listing reflects the entity's inclusion in threat-intelligence records documenting cybersecurity incidents and adversary activity relevant to its sector and geographic location. This description maintains neutrality regarding specific incident details, avoiding speculation on data exposure, operational impact, or confirmed breach elements. The designation serves to inform stakeholders of the entity's documented relationship with identified threat actors within cybersecurity intelligence frameworks. |
||||||
| Ransomware | General Formulations id32908 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare or pharmaceutical services. As cataloged in this threat-intelligence index, the entity is identified as a ransomware victim associated with the threat actor interlock. The listing type reflects the organization's status following a cyber incident connected to this specific adversary group. This entry compiles neutral, factual context regarding the entity's sector, geographic presence, and association with interlock for threat-intelligence analysis and monitoring purposes. |
||||||
| Ransomware | General Formulations id32908 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related healthcare-focused offerings. This entity is cataloged as a ransomware victim within the threat-intelligence index, with its association to the threat actor interlock documented for analytical reference. The listing type identifies the organization as having experienced ransomware-related activity, contextualized by its industry exposure and geographic location. This description maintains factual neutrality regarding the incident while aligning with catalog requirements for threat-intelligence indexing. |
||||||
| Ransomware | General Formulations id32908 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare-focused services. As a ransomware victim, the entity is documented within this threat-intelligence index under the associated threat actor interlock. The listing type identifies the organization as having experienced ransomware activity, contextualized by its sector and geographic location without disclosing unverified incident details. This entry serves to catalog the entity’s exposure profile, threat actor linkage, and sector classification for cybersecurity and intelligence reference purposes. |
||||||
| Ransomware | General Formulations id32908 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing formulations and related commercial services aligned with medical and pharmaceutical markets. As cataloged in the threat-intelligence index, the entity is classified as a ransomware victim associated with the threat actor interlock. This listing reflects the security event linkage documented within the intelligence source without disclosing unverified technical details, breach scope, or operational impact. The record supports threat-mapping and sector-focused cyber-risk assessment for healthcare and pharma organizations. It neutrally documents the association between generalformulations.com, the ransomware victim classification, and the interlock attribution. |
||||||
| Ransomware | General Formulations id32908 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related healthcare-focused offerings. As a ransomware victim indexed in this threat-intelligence catalog, the entity is documented in relation to the threat actor interlock. The listing type identifies its involvement within a cyber incident context without disclosing unverified technical details, data specifics, or confirmed breach assertions. This entry serves to catalog the association neutrally for threat-intelligence monitoring, sector risk assessment, and analyst reference within the ransomware victim index. |
||||||
| Ransomware | General Formulations id32909 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare-focused services. As cataloged in our threat intelligence index, this entity is classified as a ransomware victim associated with the threat actor interlock. The listing reflects observed threat intelligence linkage without confirming specific breach details, data exfiltration scope, or operational impact. This entry supports security teams monitoring healthcare sector ransomware activity and related actor campaigns. All information remains neutral and factual, aligned with standard threat intelligence cataloging practices for identified victims. |
||||||
| Ransomware | General Formulations id32914 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related healthcare-focused services. The entity is cataloged as a ransomware victim within the threat-intelligence index, specifically associated with the threat actor interlock. This listing reflects the organization's inclusion in cybersecurity threat reporting concerning ransomware activity. The description maintains neutrality regarding incident details, as confirmed specifics such as data scope or breach validation are not attributed here. The catalog entry serves to inform stakeholders of the entity's status within the indexed threat landscape. |
||||||
| Ransomware | General Formulations id32927 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare-focused services. As a ransomware victim identified in the threat-intelligence index, the entity is associated with threat actor interlock, reflecting a cybersecurity incident within its operational domain. The listing type categorizes this entity based on its confirmed association with ransomware activity linked to interlock. This description adheres to neutral, authoritative reporting standards without disclosing unverified incident details such as data stolen, ransom demands, or specific breach metrics. The entry serves to catalog the entity's role within the threat landscape for healthcare and pharma organizations. |
||||||
| Ransomware | General Formulations id32927 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the Healthcare and Pharma sector based in the United States, providing general formulations and related healthcare or pharmaceutical services. As cataloged in the threat-intelligence index, this entity is listed as a ransomware victim associated with the threat actor interlock. The entry documents the relationship between the organization and the identified threat actor without disclosing specific incident details, operational impacts, or unverified breach claims. This neutral record supports threat-intelligence analysis for monitoring ransomware activity within sensitive healthcare and pharmaceutical sectors. |
||||||
| Ransomware | General Formulations id32928 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare-focused services. The entity is cataloged as a ransomware victim associated with the threat actor interlock. This listing type identifies the organization's status within the threat-intelligence index, highlighting its exposure profile and the specific adversary connection under analysis. The description remains neutral and factual, focusing on sector classification, geographic location, and the verified association without disclosing unconfirmed incident details. This entry supports comprehensive threat monitoring and context for cybersecurity professionals tracking healthcare sector vulnerabilities. |
||||||
| Ransomware | General Formulations id32930 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing formulations and related healthcare-oriented services. As a ransomware victim indexed under threat actor interlock, the entity is documented within the threat-intelligence catalog to reflect its association with this specific cyber threat actor. The listing type identifies generalformulations.com as a ransomware victim, contextualizing its inclusion for analysts tracking healthcare sector exposure and threat actor activity. This description relies solely on the entity's sector, geographic location, listing classification, and the named threat actor association without adding unverified incident details. |
||||||
| Ransomware | General Formulations id32930 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations related to healthcare product development or supply activities. As a ransomware victim, the entity is documented within this threat-intelligence index under the associated threat actor interlock, indicating a cybersecurity incident context tied to this actor. The listing serves to catalog the relationship between the organization, its sector profile, and the identified threat actor without disclosing unverified incident details. This neutral description supports threat intelligence analysis by establishing the entity's classification, geographic context, industry relevance, and attacker association for catalogued research. |
||||||
| Ransomware | General Formulations id32930 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare-focused services or products. As cataloged in this threat-intelligence index, the entity is classified as a ransomware victim associated with the threat actor interlock. This listing reflects the observed relationship between the organization and the identified threat actor within cybersecurity intelligence records. The description remains neutral regarding specific incident details, as confirmed specifics such as data accessed or operational impact are not publicly attributed to this entry. Understanding this association supports risk assessment for healthcare and pharma organizations facing ransomware threats. |
||||||
| Ransomware | General Formulations id32930 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related healthcare solutions tailored to clinical and commercial needs. As a ransomware victim listed in this threat-intelligence index, the entity is associated with threat actor interlock, reflecting a cybersecurity incident within its operational environment. This listing type documents the relationship between the affected organization and the identified threat actor without disclosing unverified incident details. The entry serves as part of a comprehensive catalog for monitoring cyber threats across critical healthcare and pharmaceutical domains. All information is presented neutrally to support threat intelligence analysis and catalog integrity. |
||||||
| Ransomware | General Formulations id32930 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related services. As a ransomware victim indexed under threat actor interlock, the entity's inclusion reflects its association with this cyber threat intelligence record. This listing type documents the entity's status within the ransomware incident landscape, contextualized by its industry and geographic location. The description remains neutral, focusing solely on the verified association and sector profile without disclosing unconfirmed incident details, data specifics, or operational claims. |
||||||
| Ransomware | General Formulations id32930 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sector, providing general formulations and related healthcare-focused services. As cataloged in our threat-intelligence index, this entity is classified as a ransomware victim associated with the threat actor interlock. The listing reflects the entity's exposure within cybersecurity threat monitoring frameworks, emphasizing sector vulnerability and active threat correlation. No specific breach details, data exfiltration metrics, ransom terms, or confirmed incident specifics are included in this description to maintain factual neutrality and avoid speculation. This record serves as a structured reference for security analysts tracking ransomware incidents across critical healthcare and pharmaceutical organizations. |
||||||
| Ransomware | General Formulations id32930 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related healthcare-oriented services. The entity is cataloged in this threat-intelligence index under the listing type ransomware victim, associated with threat actor interlock. This designation reflects its inclusion in intelligence records connecting the organization to an identified cyber threat actor operating within its geographic and industry context. The description remains neutral regarding specific incident details, as confirmed breach specifics are not attributed here. Understanding this association supports threat-aware monitoring, sector-specific risk assessment, and context for cybersecurity professionals tracking healthcare and pharma ransomware exposure. |
||||||
| Ransomware | General Formulations id32930 View details | United States | Healthcare / Pharma | — | ||
|
generalformulations.com operates within the United States healthcare and pharmaceutical sectors, providing general formulations and related services to support clinical and medical applications. As a ransomware victim associated with the threat actor interlock, this entity is documented within the threat-intelligence index to inform security teams and stakeholders about potential cyber incidents affecting healthcare and pharma organizations. The listing reflects an association with interlock without disclosing specific breach details, as confirmed incident specifics remain outside the scope of this catalog entry. This neutral record supports ongoing threat monitoring and risk awareness across critical healthcare infrastructure. |
||||||
| Ransomware | PMA id18629 View details | Canada | Services | — | ||
|
Peter Mielzynski Agencies (PMA) is an importer and distributor of wines and spirits. PMA was founded in 1979 and is headquartered in Ontario, Canada. Since its inception, PMA has become the leading agency for wines and spirits in Canada. Some of the world's premium spirits and wine brands they represent include Grant's Whisky, Glenfiddich Single Malt Scotch, Gibson's Finest Canadian Whisky, Two Oceans Wines, Amarula Cream Liqueur, Jägermeister and Disaronno. |
||||||
| Ransomware | PMA id32607 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose cybersecurity posture and operational environment are documented within threat-intelligence indexing frameworks. As classified under the ransomware victim listing type, this entry reflects threat-intelligence assessment associating the organization with the interlock threat actor group. The description remains neutral and factual, focusing on sector, geographic context, listing classification, and associated actor without asserting unverified incident details. This catalog entry supports security teams monitoring retail and e-commerce environments for ransomware-related exposure indicators. |
||||||
| Ransomware | PMA id32607 View details | Canada | Services | — | ||
|
Peter Mielzynski Agencies (PMA) is an importer and distributor of wines and spirits. PMA was founded in 1979 and is headquartered in Ontario, Canada. Since its inception, PMA has become the leading agency for wines and spirits in Canada. Some of the world's premium spirits and wine brands they represent include Grant's Whisky, Glenfiddich Single Malt Scotch, Gibson's Finest Canadian Whisky, Two Oceans Wines, Amarula Cream Liqueur, Jägermeister and Disaronno. |
||||||
| Ransomware | PMA id32713 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Services sector based in Canada, providing business and professional services to clients. The entity is cataloged as a ransomware victim within a threat-intelligence index. This listing type indicates its involvement with malicious cyber activity targeting service-oriented organizations. The associated threat actor identified is interlock, which is documented alongside this entity in the intelligence record. This description maintains neutrality regarding specific incident details while accurately reflecting the indexed classification. |
||||||
| Ransomware | PMA id32714 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose security posture was impacted in a ransomware incident documented within the threat-intelligence index. As a ransomware victim associated with the threat actor interlock, this listing provides contextual information regarding the entity's sector, geographic location, and the nature of the cyber threat exposure. The description remains factual and neutral, focusing on the verified association without speculating on unconfirmed technical details or specific breach outcomes. This catalog entry supports threat-intelligence analysis by linking the entity to its known risk profile and associated adversary. |
||||||
| Ransomware | PMA id32714 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector and is based in Canada. The entity represents a business organization whose infrastructure was impacted by a ransomware incident, as documented within this threat-intelligence index. The listing type identifies pmacanada.com specifically as a ransomware victim associated with the threat actor interlock. This entry contributes contextual intelligence regarding cyber threat exposure within the retail digital commerce landscape, providing neutral catalog data for analysts tracking adversary activity and victim profiles across sectors and geographies. |
||||||
| Ransomware | PMA id32715 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, with operations associated with Canada. The entity represents a business organization whose cybersecurity posture was assessed as part of a threat-intelligence catalog identifying ransomware victimization patterns. As a ransomware victim associated with interlock, this listing reflects threat actor attribution and sector exposure without disclosing confirmed breach details, data exfiltration specifics, financial impact, or operational remediation. The description remains neutral and factual, focusing on entity classification, sector context, geographic association, and the listing type within the intelligence index. |
||||||
| Ransomware | PMA id32719 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose infrastructure was identified in threat-intelligence records as a ransomware victim associated with the threat actor interlock. This listing reflects the cybersecurity community's documentation of an incident affecting this organization, contextualized by its industry and geographic location. The description remains neutral regarding the precise technical details of the event, as confirmed specifics are not publicly attributable to the company itself. The association with interlock is presented as part of the threat-intelligence index catalog for analytical and defensive reference. |
||||||
| Ransomware | PMA id32719 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business organization whose cybersecurity posture and incident status are cataloged within a threat-intelligence index. As a ransomware victim associated with interlock, this listing reflects the entity's inclusion in records documenting attacks linked to this threat actor. The description maintains factual neutrality regarding the nature of the threat and avoids speculation on breach details, data exposure, or operational impact. This entry supports threat-intelligence professionals in assessing risk patterns across retail and e-commerce environments targeted by interlock. |
||||||
| Ransomware | PMA id32727 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business organization whose infrastructure or operations were associated with a ransomware incident, as indexed within the threat-intelligence catalog. This listing type identifies pmacanada.com specifically as a ransomware victim connected to the interlock threat actor profile. The description focuses on the entity's sector, geographic context, and its classification within cybersecurity intelligence records without asserting unverified technical details or incident outcomes. Such entries support threat-intelligence analysis for monitoring retail and e-commerce sector exposures. |
||||||
| Ransomware | PMA id32729 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Services sector and is based in Canada. The entity functions as a commercial organization providing service-oriented offerings, though specific operational details are limited within the threat-intelligence context. It has been cataloged as a ransomware victim linked to the interlock threat actor. This listing reflects its association with this cybersecurity incident within the intelligence index. The description remains neutral, focusing solely on the entity's classification and verified threat linkage without disclosing unconfirmed incident details. |
||||||
| Ransomware | PMA id32729 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector and is associated with Canada. The entity is cataloged as a ransomware victim in this threat-intelligence index, with interlock identified as the associated threat actor or source. The listing type indicates observed or attributed ransomware exposure within the cybersecurity threat landscape. No specific incident details, such as stolen data types, record counts, ransom amounts, or confirmed breach evidence, are included to maintain factual neutrality. This entry provides an authoritative overview of the entity's sector, geographic context, listing classification, and threat-actor association for catalog and intelligence use. |
||||||
| Ransomware | PMA id32730 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Retail and E-commerce sector and is located in Canada. The entity represents a business whose infrastructure or operations were identified within a threat-intelligence index under the ransomware victim listing type. Its association with the threat actor interlock contributes contextual intelligence regarding retail and e-commerce exposure to ransomware activity. This description avoids inventing confirmed breach details, including data theft specifics, affected records, ransom terms, or incident timelines. The record is presented neutrally as an indexed ransomware victim linked to interlock for analytical catalog purposes. |
||||||
| Ransomware | PMA id32733 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity serves customers through digital commerce channels and maintains operational infrastructure typical of modern retail organizations. It has been identified within this threat-intelligence index as a ransomware victim associated with the threat actor interlock. This listing reflects the cybersecurity context in which the organization was documented, emphasizing its sector profile and geographic location alongside the threat actor connection. No specific incident details such as data stolen, ransom demands, or breach confirmation are included, adhering to factual neutrality and avoiding speculation beyond the verified association. |
||||||
| Ransomware | PMA id32733 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Services sector and is associated with Canada. The entity represents a business organization cataloged in this threat-intelligence index due to its classification as a ransomware victim. The listing connects pmacanada.com to the threat actor interlock, providing context for cybersecurity analysts monitoring ransomware activity across sectors and geographies. This description maintains factual neutrality regarding the nature of the incident while documenting the entity's inclusion in the ransomware victim index. No specific breach details, data claims, or financial impacts are stated to preserve accuracy. |
||||||
| Ransomware | PMA id32733 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity functions as an online commerce platform serving customers through digital retail channels, aligning with the sector profile identified in the threat-intelligence index. As a ransomware victim, pmacanada.com is documented in relation to threat actor interlock, reflecting an incident categorized under cybercrime intelligence analysis. This listing provides context for security researchers, defenders, and stakeholders monitoring retail sector threats linked to this specific threat actor. The description remains factual and neutral, focusing solely on the entity's operational profile and its association with the reported threat actor without disclosing unverified incident details. |
||||||
| Ransomware | PMA id32733 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose security posture was assessed within a threat-intelligence catalog. It is documented as a ransomware victim associated with the threat actor interlock, reflecting its inclusion in intelligence records concerning cyber incidents affecting commercial sectors. This listing provides neutral context for researchers and defenders monitoring retail and e-commerce environments for threat patterns. No specific breach details, data losses, or financial impacts are asserted beyond the verified classification. |
||||||
| Ransomware | PMA id32733 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector and is headquartered in Canada. The entity's domain and operational profile align with businesses handling consumer commerce, digital storefronts, and customer transaction infrastructure. In the threat-intelligence index, pmacanada.com is cataloged as a ransomware victim associated with the threat actor interlock. This listing type indicates that the entity was impacted by ransomware activity connected to interlock, without disclosing specific technical findings, data exfiltration details, ransom demands, or confirmed breach elements. The entry provides neutral context for monitoring cyber incidents within Canadian retail and e-commerce environments. |
||||||
| Ransomware | PMA id32733 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business whose infrastructure or operations were identified within a threat-intelligence index as a ransomware victim associated with the threat actor interlock. This listing type contextualizes the organization within cyber-threat intelligence records, reflecting its connection to a specific adversary activity without disclosing unverified incident details. The description maintains neutrality regarding confirmed breach specifics, avoiding invented claims about stolen data, records, ransom amounts, or technical compromise details. It serves as authoritative catalog copy for indexing purposes. |
||||||
| Ransomware | PMA id32734 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business organization whose infrastructure or digital operations were affected in connection with a ransomware incident. This listing type identifies pmacanada.com as a ransomware victim associated with the threat actor interlock within the threat-intelligence index. The description focuses on the entity's sector, geographic context, and its classification without speculating on unverified technical details or incident specifics. This catalog entry supports threat-aware analysis for security professionals monitoring retail and e-commerce environments. |
||||||
| Ransomware | PMA id32734 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose infrastructure was impacted by a ransomware incident, as documented within the threat-intelligence index. This listing type identifies pmacanada.com as a ransomware victim associated with the threat actor interlock. The catalog entry provides neutral context regarding the entity's sector, geographic location, and its classification within the intelligence dataset. No specific technical incident details, data exfiltration specifics, or financial impact figures are included, preserving factual accuracy and neutrality. |
||||||
| Ransomware | PMA id32737 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Services sector and is based in Canada. The entity represents a business organization documented within the threat-intelligence index as a ransomware victim associated with the threat actor interlock. This listing type indicates its inclusion in records tracking ransomware incidents and connected adversary activity. The description focuses on the entity's classification, geographic context, sector classification, and the specific threat-intelligence association without disclosing unverified incident details. pmacanada.com serves as a reference point for security teams monitoring ransomware exposure linked to interlock. |
||||||
| Ransomware | PMA id32737 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector from Canada, providing online commerce and retail-related services to customers and business partners. As a ransomware victim indexed in the threat-intelligence catalog, its inclusion reflects an incident associated with the threat actor interlock. The listing type identifies pmacanada.com specifically as a ransomware victim, contextualized by its sector and geographic location. This entry documents the entity within the intelligence framework without disclosing unverified technical findings, breach details, or unconfirmed claims regarding data exposure or impact. The record serves to inform stakeholders about the association between this organization, its operational sector, and the identified threat actor. |
||||||
| Ransomware | PMA id32738 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Services sector and is headquartered in Canada. The entity functions as a commercial organization within this service-oriented industry, providing offerings aligned with its sector classification. It has been formally cataloged within a threat-intelligence index under the designation ransomware victim, linked to the threat actor interlock. This listing reflects the entity's association with this specific cyber threat actor within the intelligence framework. The description remains neutral and factual, focusing solely on the entity's categorization and its verified association without disclosing unconfirmed incident details. |
||||||
| Ransomware | PMA id32738 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, with operations associated with Canada. The entity represents a business organization whose security posture was documented within a threat-intelligence index as a ransomware victim. This listing type indicates that the organization was affected by ransomware activity, with interlock identified as the associated threat actor or source. The description focuses on the entity's sector, geographic context, and its classification within the intelligence catalog without disclosing unverified technical or operational details. pmacanada.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | PMA id32739 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The domain represents an organization whose infrastructure was impacted by a ransomware incident, formally categorized within the threat-intelligence index as a ransomware victim linked to the interlock threat actor. This listing type documents the entity's exposure within the cyber threat landscape, providing context on its operational domain and the associated adversary. The description adheres to neutral, authoritative reporting standards without disclosing unverified incident details such as data exfiltration specifics or financial impact metrics. It serves to catalog the entity's presence in the ransomware victim index under the interlock attribution for analytical and defensive reference. |
||||||
| Ransomware | PMA id32739 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Canadian retail and e-commerce sector, providing online commerce services and digital storefront functionalities. As a ransomware victim indexed in this threat-intelligence catalog, the entity is documented alongside the associated threat actor interlock for analytical and defensive reference. The listing type reflects the cybersecurity classification of this organization as impacted by ransomware activity, contextualized within its geographic and industry profile. This neutral description adheres to factual reporting standards without inventing incident details, ensuring clarity for threat-intelligence consumers and security stakeholders. |
||||||
| Ransomware | PMA id32744 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Services sector and is located in Canada. The entity represents a business organization whose infrastructure was identified within a threat-intelligence index as a ransomware victim. This listing type indicates its association with the threat actor interlock, a group tracked in cyber threat intelligence for deploying ransomware campaigns. The catalog entry provides neutral context on the entity’s sector, geographic location, and its classification alongside the specified threat actor without disclosing unverified incident details. This information supports threat analysts and security professionals in monitoring adversary activity and understanding contextual risk profiles. |
||||||
| Ransomware | PMA id32744 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity is cataloged in this threat-intelligence index under the listing type ransomware victim, associated with the threat actor interlock. The description reflects the verified relationship between the organization and the identified threat actor without disclosing unconfirmed incident details such as data stolen, records accessed, ransom demands, or specific breach timelines. This entry serves to document the cybersecurity context for pmacanada.com as part of ongoing threat monitoring and intelligence aggregation. It was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | PMA id32746 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose security posture and incident profile are cataloged within this threat-intelligence index. As a ransomware victim associated with the threat actor interlock, pmacanada.com is documented to provide context on cyber exposure patterns affecting retail and e-commerce environments. This listing type highlights the relationship between the entity and the identified threat actor without disclosing unverified incident details. The entry supports threat analysts, security teams, and defenders in understanding sector-specific ransomware risks tied to interlock activity. |
||||||
| Ransomware | PMA id32746 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector and is associated with the country Canada. The entity is cataloged in this threat-intelligence index as a ransomware victim connected to the threat actor interlock. The listing reflects the cybersecurity context surrounding the organization without disclosing unverified incident details such as stolen data, ransom terms, or confirmed breach specifics. This description focuses on the entity's sector, geographic context, listing classification, and attributed threat actor to support accurate threat-index navigation and risk assessment. |
||||||
| Ransomware | PMA id32747 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity is cataloged in this threat-intelligence index as a ransomware victim linked to the threat actor interlock. The listing captures the relationship between the organization, its operational sector, geographic location, and the associated cyber threat actor without disclosing unverified incident details. This entry supports cybersecurity professionals, analysts, and stakeholders in monitoring ransomware activity across retail and e-commerce environments in North America. It neutrally records that pmacanada.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | PMA id32747 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose infrastructure was associated with a ransomware incident, as documented within this threat-intelligence index. The listing identifies pmacanada.com specifically as a ransomware victim connected to the threat actor interlock. This classification reflects the cybersecurity context in which the entity appears, emphasizing its sector, geographic presence, and relationship to the named threat actor without disclosing unverified incident details. The entry serves threat-intelligence catalog purposes by cataloging the entity alongside its operational context and associated adversary profile. |
||||||
| Ransomware | PMA id32748 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector and is associated with Canada. The entity represents a business organization whose security posture was assessed as part of threat-intelligence monitoring for cyber incidents. In this catalog listing, pmacanada.com is identified specifically as a ransomware victim connected to the threat actor interlock. This designation reflects inclusion within a threat-intelligence index tracking ransomware-related entities and their associated actors, providing context for security analysts and defenders monitoring retail and e-commerce environments. No further incident details, such as breach confirmation, stolen data, or ransom specifics, are provided in this description. |
||||||
| Ransomware | PMA id32752 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, with operational presence associated with Canada. The entity is cataloged in the threat-intelligence index as a ransomware victim, specifically associated with the threat actor interlock. This listing type indicates that the organization was impacted by ransomware activity connected to interlock, without disclosing specific technical details, data exfiltration specifics, or confirmed breach metrics. The description maintains neutrality regarding incident specifics, focusing on verified index classification and contextual sector and geographic information. It serves as a reference point for analysts tracking ransomware incidents within Canadian retail and e-commerce environments linked to interlock. |
||||||
| Ransomware | PMA id32752 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose systems were identified within the threat-intelligence index under the ransomware victim classification. This listing reflects an association with the threat actor interlock, indicating a cybersecurity context relevant to retail and online commerce environments. The description avoids speculation regarding specific incident details, data exposure, or operational impact, maintaining a neutral and factual perspective consistent with threat-intelligence catalog standards. The inclusion underscores the importance of monitoring ransomware activity across vulnerable retail and e-commerce sectors in Canadian markets. |
||||||
| Ransomware | PMA id32752 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose infrastructure was impacted as part of an incident cataloged under the ransomware victim listing type. Threat-intelligence indexing associates this entity with the interlock threat actor, reflecting the operational context and attribution framework applied to the record. The description avoids speculative details regarding data exposure, ransom terms, or confirmed breach specifics, maintaining a neutral and factual posture consistent with professional threat-intelligence documentation. This listing serves to inform analysts tracking cyber incidents across retail and e-commerce environments in Canadian contexts. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, with its presence associated with Canada. The entity represents a business organization whose security posture was assessed within the threat-intelligence index following its identification as a ransomware victim. This listing type indicates that the organization was affected by ransomware activity attributed to the interlock threat actor. The catalog entry provides neutral context regarding the entity's sector, geographic location, and its association with this specific cyber threat actor. The information reflects the threat-intelligence index's documentation without confirming specific technical incident details. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Services sector and is based in Canada. The entity represents a business organization that has been identified within threat-intelligence records as a ransomware victim linked to the threat actor interlock. This designation reflects the cybersecurity context in which the organization was affected, highlighting vulnerabilities within its digital infrastructure. The listing serves to document this association for threat-intelligence analysis and catalog purposes. It was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Services sector and is located in Canada. The entity represents a business organization whose infrastructure was impacted by a ransomware incident, documented within threat-intelligence indexing frameworks. As a ransomware victim linked to the interlock threat actor, this listing reflects observed security events and associated adversary activity in cybersecurity intelligence databases. The description adheres to neutral reporting standards, focusing on verified indexing attributes without speculating on unconfirmed technical details, data exfiltration specifics, or recovery outcomes. This entry serves to catalog the relationship between the entity, its sector classification, location, and the identified threat actor interlock. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business organization whose infrastructure was identified within threat-intelligence records as a ransomware victim associated with the threat actor interlock. This listing type indicates an observed cyber incident pattern linked to interlock's activity in the retail technology environment. The catalog entry provides neutral context for defenders assessing risks to Canadian retail and e-commerce operations. It was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, with operations associated with Canada. The entity serves customers and conducts commerce in the retail and online marketplace domain, making it relevant to cybersecurity monitoring for business continuity and digital service resilience. It is cataloged in this threat-intelligence index under the listing type ransomware victim, associated with threat actor interlock. This classification reflects the intelligence context in which the entity appears, without confirming specific incident details, data exposure, or operational impact. The entry supports analyst review of retail and e-commerce exposure patterns tied to identified threat actors. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business organization whose security posture and incident history are documented within the threat-intelligence index. As a ransomware victim associated with the threat actor interlock, pmacanada.com is cataloged to reflect its exposure profile within cyber threat intelligence records. This listing type documents the relationship between the entity and the identified threat actor without disclosing unverified technical or operational details. The entry supports threat analysts, security teams, and index consumers seeking structured context on affected organizations and their associated cyber risks. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity is cataloged in this threat-intelligence index as a ransomware victim associated with the threat actor interlock. The listing reflects the organization's inclusion in cybersecurity records documenting ransomware incidents tied to this specific adversary group. No further technical or operational details regarding the incident are provided in this catalog entry. This description serves to contextualize pmacanada.com within the broader landscape of retail sector security threats and interlock-linked ransomware activity. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose infrastructure was impacted in a ransomware incident, as documented within this threat-intelligence index. The association with the threat actor interlock indicates a cybersecurity event where interlock was identified as the source or affiliated actor in connection with pmacanada.com. This listing serves to catalog the entity's role within the ransomware victim classification for analytical and defensive reference purposes. The description remains factual and neutral, focusing on the verified linkage without extrapolating beyond confirmed intelligence. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada, providing online commerce services and related commercial activities. As a ransomware victim, it is documented within this threat-intelligence index under association with threat actor interlock. The listing type identifies the entity's status in relation to a cyber threat event, contextualizing its exposure within retail digital infrastructure risks. This entry serves cybersecurity professionals by cataloging the entity's sector, geographic location, and verified threat actor linkage without disclosing unconfirmed technical or operational details. The record reflects an official categorization of the incident within the intelligence framework. |
||||||
| Ransomware | PMA id32754 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business organization whose infrastructure was impacted by a ransomware incident, as documented within this threat-intelligence index. The listing specifically associates pmacanada.com as a ransomware victim connected to the threat actor interlock. This entry provides catalog context for security analysts tracking cyber incidents across retail and digital commerce sectors in North America. The description reflects the verified association without disclosing unconfirmed technical or operational details regarding the event. |
||||||
| Ransomware | PMA id32755 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business whose infrastructure or operations were impacted by a ransomware incident. This listing identifies pmacanada.com specifically as a ransomware victim linked to the threat actor interlock within the threat-intelligence index. The description reflects the confirmed association without disclosing unverified details regarding attack vectors, data handled, or recovery specifics. It serves as a structured reference for analysts tracking cyber incidents across retail and e-commerce sectors in North America. |
||||||
| Ransomware | PMA id32755 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Canadian retail and e-commerce sector, providing digital commerce services and customer-facing commercial offerings. The entity is cataloged in the threat-intelligence index under the listing type ransomware victim, with interlock identified as the associated threat actor or source. This designation reflects the inclusion of pmacanada.com in intelligence records documenting cybersecurity incidents affecting retail and e-commerce organizations. The description remains neutral regarding specific incident details, as confirmed specifics such as data exfiltration scope, ransom terms, or breach confirmation are not provided here. It neutrally states that pmacanada.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | PMA id32756 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business organization identified within threat-intelligence records as a ransomware victim associated with the threat actor interlock. This listing type indicates that interlock was connected to an attack event targeting the organization, without disclosing specific technical details, data scope, or confirmed breach outcomes. The catalog entry provides neutral context for threat analysts tracking retail and e-commerce exposure to cyber incidents. pmacanada.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | PMA id32757 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Services sector and is associated with Canada. The entity represents a business organization that has been identified within threat-intelligence records as a ransomware victim connected to the interlock threat actor. This listing type indicates its inclusion in an index tracking cybersecurity incidents and adversary-related exposure. The description focuses solely on the entity's classification, sector context, geographic origin, and its association with interlock without detailing unverified incident specifics. Such catalog entries support threat analysts in monitoring victim patterns and correlating ransomware activity across sectors and regions. |
||||||
| Ransomware | PMA id32758 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Retail and E-commerce sector, based in Canada. The entity functions as an online retail and commerce platform, providing digital sales and customer engagement services to its market. As a ransomware victim indexed by threat intelligence, pmacanada.com is documented in relation to the threat actor interlock, reflecting active cybersecurity monitoring of retail and e-commerce environments. This listing underscores the importance of vigilance for organizations in these sectors facing potential cyber threats. The entry remains neutral, documenting the association without speculating on incident details or confirmed outcomes. |
||||||
| Ransomware | PMA id32759 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose infrastructure was impacted by a ransomware incident linked to the threat actor interlock. This listing type identifies pmacanada.com within a threat-intelligence catalog as a ransomware victim connected to interlock. The description focuses on the entity's sector, geographic origin, and verified association with the specified threat actor without disclosing unconfirmed incident details. It serves as a reference point for analysts tracking cyber threats in retail and e-commerce environments across North America. |
||||||
| Ransomware | PMA id32759 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity functions as a commercial online business, serving customers and managing commerce activities typical of this industry. Within the threat-intelligence index, pmacanada.com is cataloged specifically as a ransomware victim associated with the threat actor interlock. This listing type denotes the observed relationship between the entity and the identified malicious actor in cybersecurity threat records. The description remains neutral regarding incident details, focusing solely on the verified classification and contextual attributes of the entity. |
||||||
| Ransomware | PMA id32761 View details | Canada | Services | — | ||
|
pmacanada.com is a Canadian Services sector entity operating within the professional services domain. The domain represents an organization whose infrastructure was identified within a threat-intelligence catalog as a ransomware victim linked to the threat actor interlock. This listing type denotes the cybersecurity context in which the entity was recorded, reflecting its association with a specific cyber threat actor identified as interlock. The catalog entry provides structured intelligence context for security professionals monitoring service-sector organizations in Canada against ransomware activity. pmacanada.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | PMA id32762 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada, providing digital commerce and customer-facing retail services. As a ransomware victim, the entity is cataloged within the threat-intelligence index with an associated threat actor identified as interlock. This listing type documents the relationship between the organization and the identified cyber threat actor without disclosing unverified technical details, breach specifics, or confirmed impact metrics. The description maintains a neutral, encyclopedic tone suitable for threat-intelligence reference and catalog indexing. |
||||||
| Ransomware | PMA id32763 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business whose infrastructure was impacted by a cyber incident categorized as ransomware. Threat-intelligence indexing associates this victim with the interlock threat actor, indicating a connection between the actor and the compromised organization. This listing type documents the relationship without disclosing unverified technical details such as stolen data, ransom demands, or precise breach timelines. The entry serves as a reference point for monitoring retail and e-commerce sector vulnerabilities and associated threat activity. |
||||||
| Ransomware | PMA id32766 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity functions as an online commerce provider serving customers through digital retail channels, consistent with its sector classification. It is cataloged within this threat-intelligence index under the listing type ransomware victim, associated with the threat actor interlock. No specific technical details regarding the incident have been verified or disclosed in this catalog entry. The listing reflects the entity's documented association with this threat actor within cybersecurity intelligence records. |
||||||
| Ransomware | PMA id32766 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, with operations associated with Canada. The entity represents a business whose infrastructure or digital assets were impacted in a ransomware incident, as documented within the threat-intelligence index. This listing type identifies pmacanada.com as a ransomware victim connected to the interlock threat actor. The catalog entry reflects the observed relationship between the entity, its sector context, and the associated threat actor without disclosing unverified technical or operational details. The presence of pmacanada.com in this ransomware victim index contributes contextual data for analysts monitoring retail and e-commerce environments against coordinated cyber threats. |
||||||
| Ransomware | PMA id32766 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity is documented within this threat-intelligence index as a ransomware victim associated with the threat actor interlock. The listing reflects the cybersecurity context surrounding this organization without disclosing specific incident details such as breach confirmation, data exfiltration specifics, or ransom terms. This entry serves to catalog the relationship between the affected business and the identified threat actor for monitoring and defensive analysis. The description adheres to neutral, encyclopedic standards to support threat intelligence workflows and stakeholder awareness. |
||||||
| Ransomware | PMA id32766 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, with operations and presence associated with Canada. The entity represents a business organization targeted under the ransomware victim classification within the threat-intelligence index. Its inclusion reflects threat-intelligence analysis correlating the domain or organization with the interlock threat actor, a group associated with ransomware activity across sectors. The description maintains factual neutrality regarding the incident details, avoiding speculation on data exfiltration, ransom demands, or specific technical compromise vectors. This listing serves to document the entity's relationship to the identified threat actor for cybersecurity monitoring and defense purposes. |
||||||
| Ransomware | PMA id32766 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector based in Canada. The entity represents a business organization whose infrastructure was identified within the threat-intelligence index as a ransomware victim associated with the threat actor interlock. This classification reflects the cybersecurity context in which the organization was documented, highlighting exposure to ransomware activity without disclosing unverified incident details. The listing serves to inform threat analysts and security professionals about the entity's status within the interlock threat actor's activity profile. No specific breach confirmation, data exfiltration details, or financial impact claims are included, maintaining factual neutrality per catalog standards. |
||||||
| Ransomware | PMA id32766 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business whose infrastructure was impacted by a ransomware incident, as documented within the threat-intelligence index. This listing type identifies pmacanada.com as a ransomware victim associated with the threat actor interlock. The catalog entry provides neutral context regarding the entity's sector, geographic location, and its classification within cybersecurity threat reporting. No specific technical details regarding the attack, data handling, or recovery measures are included to maintain factual accuracy and avoid speculation. |
||||||
| Ransomware | PMA id32766 View details | Canada | Services | — | ||
|
pmacanada.com operates within the retail and e-commerce sector, based in Canada. The entity represents a business organization whose infrastructure was identified within threat-intelligence records as a ransomware victim associated with the threat actor interlock. This listing type indicates that the organization was affected by ransomware activity connected to interlock, without disclosing specific technical details, stolen data categories, record counts, ransom amounts, or confirmed breach specifics. The entry serves as a neutral reference point within the threat-intelligence catalog for monitoring cyber incidents and associated actors across retail and e-commerce environments. No first-party disclosure date is confidently identifiable from verified official notification sources. |
||||||
| Ransomware | PMA id32767 View details | Canada | Services | — | ||
|
pmacanada.com operates within the Canadian retail and e-commerce sector, providing online commerce services and related commercial offerings. As a ransomware victim indexed in this threat-intelligence catalog, it reflects an incident linked to the interlock threat actor group. The listing type identifies pmacanada.com specifically as a ransomware victim, contextualized by its geographic and sectoral profile. This entry contributes to broader awareness of cyber threats targeting retail and e-commerce environments in North America. The catalog neutrally records that pmacanada.com was listed as a ransomware victim associated with interlock. |
||||||