bqtlock
Ransomware / extortion group tracked from leak-site posts
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
11since 2025-07-30
Last post
04-03 23:57UTC
Estimated earnings
—public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.
Leak-site victims11 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Metro Hospital USA | · Apr 3, 2026 | Primary Domain: metro.hospital (Internet Site - before it went down) Internal/Email Domain: metro-hospital.net (internal facing nomenclature / business email) Compromised Data Volume: 5.355 TB of sensitive medical files Patient Records: 123,458 patients (scripts, radiology, eKG, MRI, ultrasound, blood work) Additional Assets: Complete email archives, SonicWall VPN access credentials, network infrastructure information, internal backups Payment Status: UNPAID 400 xmr - Private negotiation / Ransom demand active info : Metro Hospital USA suffered a full-scale compromise. Over 5.3TB of mission-critical medical data exfiltrated, including radiology images, electronic health records (EHR), diagnostic results, and personal identifiable health information. Additionally, SonicWall appliance access and complete corporate email repositories were obtained. Decryption key and deletion of stolen data available upon ransom fulfillment. Deadline strict. |
| DGM | · Jan 1, 2026 | Website: dgm.co.il Data Size: 526 GB Payment Status: Unpaid - Private Price Company Info: DGM is an Israel-based information technology company specializing in the supply of computer hardware and electronic equipment. The company offers a range of IT products including laptops, desktop computers, servers, printers, and related accessories, serving business and professional clients. DGM focuses on practical technology solutions tailored to organizational and enterprise needs within the local market. |
| Morning Desert Safari | · Dec 27, 2025 | Website: morningdesertsafari.net Payment Status: Unpaid - Private Price Company Info: Morning Desert Safari is a Dubai-based tour operator offering early-morning desert adventure experiences. Their tours typically include 4×4 dune bashing, sandboarding, camel rides, and sunrise desert views, with pickup and drop-off from hotels or residences in the UAE. The experience is designed for visitors who want to explore the Arabian desert in the cooler morning hours with adventure and scenic highlights before midday. |
| Arabian Desert Safari | · Dec 27, 2025 | Website: arabiandesertsafari.net Payment Status: Unpaid - Private Price Company Info: Arabian Desert Safari, established in 1976, is a Dubai-based tourism company offering guided desert safari experiences, including dune bashing, camel rides, sandboarding, cultural shows, and desert dining. The company operates tours across the UAE, focusing on adventure and traditional desert experiences. |
| Dhow Cruise Dubai Harbour | · Dec 27, 2025 | Website: dhowcruisedubaiharbour.com Payment Status: Unpaid - Private Price Company Info: Dhow Cruise Dubai Harbour is a Dubai-based tourism company offering dhow cruises and private yacht charters along Dubai Harbour and Dubai Marina. The company provides sightseeing and dinner experiences with onboard dining, entertainment, and panoramic views of Dubai's skyline, combining traditional maritime heritage with modern luxury. |
| Hatta Heritage Village | · Dec 27, 2025 | Website: hattaheritagevillage.com Payment Status: Unpaid - Private Price Company Info: Hatta Heritage Village is a historic heritage attraction in Hatta, Dubai, showcasing traditional Emirati mountain life through restored homes, forts, watchtowers, and cultural exhibits. It is maintained as a tourism and cultural site to preserve and present the UAE's history and traditions. |
| Adore UAE | · Oct 11, 2025 | Domains: adoreuae.com www.adoreuae.com Active Since: 2017 Data Size: ~private (encrypted) Payment Status: Unpaid (66 XMR requested) Encrypted Type: All servers and data |
| EPS FUJ Private School UAE | · Oct 11, 2025 | Domains: epsfuj.com www.epsfuj.com Active Since: 2024 Data Size: ~private(encrypted) Payment Status: Unpaid (50 XMR requested) Encrypted Type: All servers and data |
| European Business Server Cluster | · Aug 9, 2025 | Domains: www.bizoneo.com www.bizosoft.eu meeting.wandsoft.com dataprotectionact.ie bizoneo.com www.bizoneo.eu www.bizoneo-membership.eu www.tourguides.ie bizoneo-membership.eu cleanrooms-ireland.ie www.cleanrooms-ireland.ie members.tourguides.ie +138 more Active Since: 2005- Data Size: Shown in video Payment Status: Unpaid (private XMR requested) Encrypted Type: Full computer and database backups |
| eFunda, Inc. | · Jul 31, 2025 | Domain: efunda.com (270+ subdomains) Active Since: 1999 Data Size: ~670 GB (encrypted) Payment Status: Unpaid (200 XMR requested) Leak Type: Full database + backups |
| USA Military Alumni Networks | · Jul 30, 2025 | Domains: isabrd.com, varsityo.com, letterwinner.com, whoglue.net, whoglue.com, whoware.com, mail.usna87.com Active Since: 2000- Data Size: ~159 GB (encrypted) Payment Status: unpaid (500 XMR requested) Leak Type: Full database + backups |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .