ShellCodeX
Tools β€’ Events β€’ News β€’ Insights
Victim Claim

The Morton Grove Park District

Deadlock πŸ‡ΊπŸ‡Έ United States Public Sector mortongroveparks.com
Claimed by Deadlock
Listed on leak site 10 Jul 2026
Reported attack date 10 Jul 2026
Group claims tracked 85
Unverified claim. This entry reproduces a listing published by the Deadlock group on its own extortion site. Attackers routinely exaggerate or fabricate victims. Nothing here confirms that The Morton Grove Park District suffered a breach, or what data was actually taken.

About the organisation

The Morton Grove Park District (MGPD) is a separate municipal agency established in 1951, governed by five elected commissioners and subject to Illinois state laws. Their motto is: Everyone who lives in, works in, or visits Morton Grove has constitutional rights, no matter their citizenship or immigration status. The Village is committed to making sure every person feels safe, supported, and respected. More than 50 GB of data containing personal and sensitive information belonging to both internal employees and the organization's clients and suppliers. Documents on financial plans and internal policies are protected by a non-disclosure policy. (Including racist and sexist insights) We invite all journalists, lawyers, and law enforcement agencies to review this information.

What the listing means

The Morton Grove Park District appeared on the Deadlock leak site on 10 July 2026. Groups publish a victim once negotiations stall or as pressure during them, so a listing usually means data was already exfiltrated. This group has published 75 claims in the last 30 days and remains active.

Recommended actions

  • Treat any unsolicited message referencing The Morton Grove Park District as suspicious β€” leaked data gets weaponised for phishing within days.
  • If you hold an account on mortongroveparks.com, change that password now, update it anywhere you reused it, and enable two-factor authentication.
  • Other Public Sector organisations should review this group's known TTPs and validate detection coverage against them.
  • Watch for follow-on extortion: stolen data is often re-leaked or resold after the initial listing.
  • A leak-site listing is a claim made by the attacker, not a confirmed breach β€” check the organisation's own disclosures before acting on it.

Leak-site evidence

Listing URL https://www.ransomware.live/id/VGhlIE1vcnRvbiBHcm92ZSBQYXJrIERpc3RyaWN0QERlYWRsb2Nr

Show leak-site screenshot

Captured from the group's extortion site. It may contain the victim's data or the attacker's messaging.

Screenshot of the Deadlock leak-site listing for The Morton Grove Park District