All ransomware groups
lunalock
2 tracked victims
·first seen 2025-09-02·last activity 2025-09-13Group profile
LunaLock emerged in September 2025 targeting creative and digital platforms, notably breaching an illustrator marketplace and a Mexican ISP, and is notable for threatening to submit stolen artwork to AI companies for training if the ransom is not paid.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2025-09-13 |  JAFICA Telecomunicacionesjafica.com | Telecommunication | MX |
| 2025-09-02 |  Artists&Clientsartistsnclients.com | Consumer Services | US |