[ Ransomware claim · deadlock · 24 Oct 2026 ]

Trinity Custom Homes

The ransomware group deadlock named Trinity Custom Homes (United States) on its leak site on 24 Oct 2026. This is the group's own claim: it has not been verified by Cyfenced or Ransomware.live, and some claims turn out to be exaggerated, recycled or false.

Not confirmed so farManufacturing

[ Status ]Has the attack been confirmed?

We have found no statement from Trinity Custom Homes and no press report of an attack so far. Until the organisation says something, treat the listing as an unproven claim, but stay alert to the phishing such claims are used for.

[ The organisation ]Who is Trinity Custom Homes?

What it does
Trinity Custom Homes is a custom home builder that builds houses on the customer's own land. It offers customisable plans and upgrade options and says its homes are built from the ground up without prefab or modular components.
Based in
Ellijay, Georgia, United States
Size
More than 5,000 homes built in the Southeast, with eight sales offices
Who it serves
It serves people building a new home on their own land in Georgia, Alabama, North Carolina, South Carolina and Tennessee.

[ Impact ]Who could be affected

Homebuyers with homes under construction could see delays to schedules, contracts or payments if company systems were disrupted. Customers and suppliers could be at risk of scams or invoice fraud if contact, land or payment details were exposed.

In manufacturing generally: Production stops ripple down the supply chain to customers waiting for parts and products, and groups often take design files and supplier contracts.

[ The attacker ]About deadlock

DeadLock is a financially motivated ransomware group first reported in 2025. Cisco Talos described it loading a vulnerable antivirus driver to switch off security tools before encrypting systems, and it is reported to contact victims through the Session messaging app.

deadlock has claimed 6 organisations in the last 30 days, most in United States, Germany and South Africa, and mostly in manufacturing, healthcare and agriculture and food production.

deadlock on Ransomware.live

Other organisations deadlock has named

[ What to do ]If you are a customer, partner or neighbour

  1. If you are building with the company, confirm any change to payment instructions or draw requests by phone using a number you already know.
  2. Be cautious of unexpected emails or texts about your build, contract or loan that ask for documents or payment.
  3. Watch your bank accounts and credit reports for unusual activity if you have shared financial or identity documents.
  4. Suppliers and subcontractors should verify invoices and payment changes directly with their usual contact.

[ Similar claims ]Other manufacturing organisations in United States