New River Electrical Corp.
bd_a5a6d00c400f510c · schema v1 · pii pii-v1
Full breach record for New River Electrical Corp. →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Blacklock on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Revenue $247.1 million New River Electrical Corporation provides electric utility line construction services.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Sep 19, 2024
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (2)
- Leak Siteeldoradobd_8099233c3c8a98d82024-05-07 · +136dVerified by operator
- Leak Siteeldoradobd_b1a940b5970a9daf2024-05-07 · +136dVerified
Regulatory filings (6) · sorted by filing gap
- Indiana State AGbd_3891d8ce74ed920a2024-11-27 · +68dVerified by operator
- Montana State AGbd_731343f80ce69f142024-12-03 · +74dVerified
- Vermont State AGbd_7b611efde49729d92024-12-03 · +74dVerified
- New Hampshire State AGbd_b3939211071528672024-12-03 · +74dVerified by operator
Show 2 more filings ↓Show fewer ↑up to 74d gap
- Massachusetts State AGbd_b7aa50822bc71fe02024-12-03 · +74dVerified by operator
- Maine State AGbd_ea699e36923736e32024-12-03 · +74dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Nov 27 (IN), last Dec 3 (ME) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
blacklock
According to ransomware.live, BlackLock is a rebranded version of another ransomware group known as Eldorado. It has since become one of the most active extortion syndicates in 2025, heavily targeting technology, manufacturing, construction, finance, and retail sectors.