Skip to content
Leak-site post naming SouthernCarlson, captured by ThreatCluster
Back to victims

SouthernCarlson

tridentlocker

Ransomware leak-site victim intelligence · EN

Data size
64.16 GB
Files
15,972
Posted
Apr 9, 2026
Industry
Not Found

Summary

Written by ThreatClusterfrom site fields, file listing, leak post, screenshot

Tridentlocker claims they stole 64.16 GB across 15,972 files from SouthernCarlson, with a leak published on 04.09.2026. The leak post provides sample filenames such as Bostitch Industrial.7z, Cisco Jabber.7z, and Interchange.7z and indicates the data are contained in 7z archives. This summary reflects the group's claims and leak post; no independent verification is provided here.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Leak date: 04.09.2026. The leak contains 15972 files totaling 64.16 GB in size.

File types seen
7z × 22
Sample files (22)
Bostitch Industrial.7z
Bostitch.7z
Challenger.7z
Cisco Jabber.7z
Company Files.7z
Duo-Fast Industrial.7z
DuoFast.7z
Graphic Files.7z
iGel.7z
Interchange PRO - UFO Ballistic Nail Screws.7z
Interchange.7z
InterchangePRO - 1M Collated Finish and Framing.7z
InterchangePRO.7z
Pictures.7z
scsrv.7z
SFS Email.7z
SouthernCarlson Application Photos.7z
SouthernCarlson Store Signage.7z
southerncarlson.7z
UPLOADS.7z
Vendor Docs.7z
VENDOR NDA DOCS COMPLETED.7z

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Leak date
04.09.2026

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture