Artists&Clients targeted by lunalock ransomware group

• Ransomware group: lunalock
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: September 2, 2025

Artists&Clients targeted by lunalock ransomware group

The threat actor known as lunalock has announced a cyberattack against the Artists&Clients platform. According to a claim posted on a ransomware leak site on September 2, 2025, the group alleges that they have successfully breached the website and encrypted all of its data. This incident follows a pattern of double extortion, a common tactic used by modern ransomware groups where attackers not only encrypt a victim's systems to disrupt operations but also steal sensitive information to use as leverage for extortion.

The claims made by lunalock

The threat actor, lunalock, claims to have gained unauthorized access to the Artists&Clients website, resulting in the encryption of the organization's data. The group has issued a ransom demand of 50,000 USD to prevent the public release of the stolen information. The attackers have stated that if the ransom is not paid, they will proceed to release all acquired data to the public.

In addition to the threat of leaking sensitive files, the group has introduced a unique extortion element. They have threatened to submit all artwork hosted on the platform to AI companies to be used in training datasets. This move highlights how ransomware groups are increasingly targeting intellectual property to increase their leverage over victims.

Data allegedly compromised in the breach

The information allegedly stolen by the attackers includes a variety of sensitive assets belonging to the platform and its users. The group claims that the following types of data have been compromised:

• User personal data
• Source code
• Artwork

The compromise of source code is particularly significant as it can provide attackers with a roadmap for future vulnerabilities, while the theft of personal data and artwork directly impacts the privacy and livelihood of the platform's community.

About Artists&Clients

Artists&Clients is an online platform that allows artists to receive custom commissions and clients to work directly with artists. It serves as a marketplace that enables users to order custom illustrations and digital artworks.

Impact and organizational risks

This incident may pose significant risks of identity theft and fraud for the platform's users due to the alleged compromise of personal information. Furthermore, the threat to submit artwork to AI models without authorization could lead to significant long-term consequences regarding copyright and intellectual property rights for the artists using the service.

As the entity is based in the United States, the breach may trigger legal processes under state-level data breach notification laws and consumer protection regulations. The threat of data leakage and the ransom demand could negatively impact the organization's operational continuity and user trust. Additionally, there is a secondary risk that the leaked data may be utilized in targeted phishing campaigns against the users.

For organizations in the retail and e-commerce sectors, protecting against such threats requires robust defensive measures. Common industry practices to mitigate these risks include maintaining regular, offline backups of critical data, implementing multi-factor authentication across all user and administrative accounts, and conducting regular security audits to identify vulnerabilities. Furthermore, monitoring for unauthorized data exfiltration and maintaining a comprehensive incident response plan are essential steps for maintaining operational resilience in the face of evolving ransomware tactics.