Ransomware Group: BLACKLOCK

VICTIM NAME: Ryan Harvie McEnery

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BLACKLOCK Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to Ryan Harvie McEnery, a professional operating within the financial services sector in the United Kingdom. The attack was publicly disclosed on June 5, 2025, and the breach was confirmed to have occurred the same day. The compromised data likely includes sensitive information related to the company’s operations, which offers accounting, taxation, superannuation, and valuation services to businesses and individuals with revenue below five million dollars. The company employs fewer than 25 staff members, emphasizing its small to medium-sized enterprise status.

The threat actors associated with the breach belong to the “blacklock” group, known for targeting organizations in the financial and professional services sector. The leak notice includes a screenshot of the compromised data, which suggests that internal documents or client information may have been exposed. Download links or claims of data leak are available through the provided assertion URL, which may include sensitive organizational details or client data. The incident has been publicly acknowledged via a dedicated leak page, highlighting the breach’s public exposure and the ongoing threat posed by ransomware gangs targeting small and medium enterprises.