← Back to all threat actors

lockdata

LockData Auction is a dark web marketplace that emerged around May 2021 operating an invite-only stolen data auction portal, representing a shift toward pure data-theft extortion with auctions for stolen corporate data starting from $50,000, rather than a traditional ransomware encryptor operation.

How we source and review actor profiles
Motivation
ransomware
Last seen
2021-09-09
Sectors
manufacturing, healthcare, technology
Status
Dormant

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

First listed
Victim claim[USA] OrthoCare, 700 Lake Ave, Ste 6, Manchester, New Hampshire, 03103 listed by lockdata

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claim[Saudi Arabia] Al Wefag Trading & Manufacturing listed by lockdata

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claim[CZ] GORDIC spol. s r.o. listed by lockdata

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claim[USA] Crary Industries Inc. listed by lockdata

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claim[CHINA] TCL China Star Optoelectronics Technology Co., Ltd listed by lockdata

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Last observed
Indicator1 indicator cataloged

Types: onion.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

lockdataCanonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...