Inventory Management and Counting Solutions listed on Blacklock ransomware leak site

• Ransomware group: Blacklock
• Country: United States
• Sector: Professional Services
• Announcement date: May 16, 2025

Blacklock ransomware group claims breach of Datascan

The threat actor known as Blacklock has listed Inventory Management and Counting Solutions (Datascan) on its dedicated leak site. According to the announcement made by the group, the organization's data has been compromised in a cyberattack. This listing serves as a public claim by the ransomware group regarding the breach of the United States-based professional services firm.

Details of the alleged attack

The claim made by the Blacklock group indicates that the incident occurred several months before the public announcement. While the group officially added the company to its leak site on May 16, 2025, the stated date of the alleged attack is January 4, 2025. This discrepancy between the attack date and the announcement date is a common occurrence in ransomware operations, where actors may hold stolen data for a period before making it public to increase pressure on the victim.

Regarding the specifics of the stolen information, the group has not provided any details or sample files regarding the content of the allegedly leaked data. Furthermore, the announcement does not specify the volume of the data or the number of files involved. No specific ransom demand has been mentioned in the public listing, and the group has not provided any further details regarding the nature of the breach at this time.

About Inventory Management and Counting Solutions

Datascan is a technology company that provides retailers with on-demand self-scan inventory solutions via a Solution-as-a-Service (SaaS) model. Founded in 1970, the company specializes in inventory management and counting processes. As a provider of specialized technology services, the organization plays a role in the supply chain and retail operations of its clients.

Risk assessment and industry implications

Public information about the Blacklock group remains limited, making it difficult to determine the full scope of their operational methods. However, the claim that the organization's data has been compromised may create secondary risks for employees and customers, such as identity theft or targeted phishing attacks. Such risks are common when sensitive information is leaked, as attackers can use the data to craft highly convincing social engineering campaigns.

The listing names no specific data types as being affected. Because the organization is based in the United States, potential data breaches may be subject to state-level data protection laws and regulations. Such legal frameworks often dictate how companies must respond to and report potential compromises to the public and regulatory bodies.

The organization may face significant operational disruptions and reputational damage resulting from such a claim. Given the use of double extortion tactics—a method where attackers both encrypt data and threaten to leak it—it is assessed that the organization may be pressured to pay a ransom to prevent the release of information. In the professional services and SaaS sectors, maintaining data integrity and availability is critical for business continuity. Organizations in this sector often focus on robust backup strategies, multi-factor authentication, and continuous monitoring to defend against such threats.