Back to Threat Groups

mountlocker

INACTIVE

ransomware group

MountLocker operated as a ransomware-as-a-service from July 2020, using a standard developer/affiliate revenue split and

Victims
18
records
First Discovered
Feb 7, 2021
victim
Last Discovered
Feb 8, 2022
victim
Inactive Since
1,740
days
Countries
2
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026
Oct
2026
Nov
2026

Victims (18)

Dassault Falcon Jet

mountlocker2 groups: ragnarlocker
Feb 8, 2022
Manufacturing1.0Published

Memry Corporation

mountlocker
Sep 9, 2021
Manufacturing1.0Published

ThyssenKrupp System Engineering

mountlocker
Sep 9, 2021
Manufacturing1.0Published

Century 3, Inc.

mountlocker🇺🇸 US3 groups: alphv, clop, daixin
Sep 9, 2021
Healthcare1.0Published
peoplecorporation.com

Amey plc

mountlocker
Sep 9, 2021
Construction1.0Published

Transtar1

mountlocker
Sep 9, 2021
Transportation/Logistics1.0Published

Wasserstorm

mountlocker2 groups: azroteam
Sep 9, 2021
Consumer Services1.0Published

MERSEN

mountlocker
Sep 9, 2021
Manufacturing1.0Published

Geotech Engineering and Testing

mountlocker
Sep 9, 2021
Construction1.0Published

Laboratorios SMA S.A.C.

mountlocker🇪🇸 ES
Sep 9, 2021
Agriculture and Food Production1.0Published
joseguma.com

Makalot

mountlocker
Sep 9, 2021
Manufacturing1.0Published

Gunnebo AB

mountlocker
Sep 9, 2021
Manufacturing1.0Published

Enerstar Rentals & Services

mountlocker
Sep 9, 2021
Business Services1.0Published

Forrester Construction

mountlocker
Sep 9, 2021
Construction1.0Published

Homeland Title

mountlocker
Sep 9, 2021
Financial Services1.0Published

FAPS Inc.

mountlocker
Sep 9, 2021
Technology1.0Published
lydall.com

Nachi America Inc.

mountlocker
Sep 9, 2021
Construction1.0Published

ECU Worldwide

mountlocker
Feb 7, 2021
Transportation Systems1.0Published

Infrastructure

leak site
OFFLINE

malformed url

http://mountnewsokhwilx.onion

Oct 12, 2026