RANSOMWARE VICTIM⚠ DUPLICATE CLAIM
grupozeta.com & www.grupozetajalisco.com
alphalocker📍 Mexico (MX)📅 September 16, 2025
8
same group
Attack Intelligence
grupozeta.com & www.grupozetajalisco.com was compromised in a ransomware attack attributed to alphalocker in September 2025. The organization, operating in an undisclosed sector in Mexico, was added to the group's data leak site as part of an extortion campaign.
alphalocker operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
~170 GB data Ciudad Juárez, México · Samalayuca, Chihuahua, Mexico · Valle de Juárez, Jalisco, México -Contracts -Projects -Clients -Customers -Employees etc
Additional Details
Other Victims — alphalocker (8)
www.pyramisgroup.com
GR · Financial Services
Feb 2026
www.bew.co.th
TH · Technology
Nov 2025
www.unterkofler.info
AT · —
Nov 2025
www.libertydentaltown.com
US · Healthcare
Oct 2025
www.adhunikpower.com
IN · Energy
Oct 2025
www.sonoshowmoveis.com.br
BR · —
Sep 2025
nubox.com & sumasaas.com
NL · Technology
Sep 2025
ipathpr.com
US · Technology
Sep 2025
Quick Facts
CountryMexico (MX)
Attack DateSep 16, 2025
Intel Sourceransomware.live
StatusDUPLICATE CLAIM
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.