The city of Peabody, Massachusetts this week confirmed it notified 48,004 state residents of a June 2025 data breach that compromised Social Security numbers, financial account info, and driver’s licenses.
A ransomware group called Interlock took credit for the attack shortly after it occurred. On the cybercriminal group’s data leak website, Interlock said it stole 124 GB of data from Peabody’s government network.
Peabody officials have not acknowledged Interlock’s claim, and Comparitech cannot verify its authenticity. We do not know if Peabody paid a ransom, how much Interlock demanded, or how attackers breached Peabody’s network. Comparitech contacted Peabody officials for comment and will update this article if they reply.
“On July 7, 2025, Peabody became aware that certain computer network systems were inaccessible,” says the town’s notice (PDF) to victims.
“We learned that an unauthorized actor gained access to certain Peabody systems between June 13, 2025 through July 8, 2025 and copied certain data stored in those locations.”
The town is offering eligible victims free credit monitoring through IDX. The deadline to enroll is May 5, 2026.
Who is Interlock?
Interlock is a ransomware gang that first started claiming attacks on its leak site in October 2024. Its malware both steals data and locks down computer systems. Interlock then demands a ransom to restore infected systems and delete stolen data.
Interlock has claimed responsibility for 41 confirmed ransomware attacks since it began, plus 48 unconfirmed claims that haven’t been publicly acknowledged by the targeted organizations.
Six of Interlock’s 30 attacks in 2025 hit government entities. It took credit for the following:
- West Lothian Council (UK) reported a May 2025 data breach
- St Paul, MN said it refused to pay a ransom for a July 2025 data breach
- Box Elder County, UT notified 81,664 people after it refused to pay a ransom for an August 2025 data breach
- Shelbyville Police Department (KY) reported an October 2025 data breach
- Fargo Park District (ND) reported an October 2025 data breach
Ransomware attacks on US government
Comparitech researchers logged 82 confirmed ransomware attacks on US government entities in 2025. Those attacks compromised the personal data of more than 630,000 people.
In January 2026 alone, four government bodies reported data breaches resulting from ransomware attacks:
- City of Midway, FL
- Winona County, MN
- City of New Britain, CT
- Tulsa International Airport (OK)
Last month, Upper Township, NJ acknowledged a December 2025 data breach claimed by the Genesis ransomware gang.
Ransomware attacks on government entities can both steal data and lock down computer systems. They can disrupt any number of government systems from bill payments to court records and even emergency dispatch. Governments must pay a ransom for the stolen data and to restore systems, or else they face extended downtime, permanent data loss, and putting data subjects at increased risk of fraud.
About Peabody, MA
Peabody is a city on the Essex County, Massachusetts, on the state’s northern Atlantic shore, with a population of about 55,000 people.
