bERS
July 10, 2026
•[ ransomware, manufacturing ]
bERS was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Other. Country: Bulgaria. Website: bers.bg. Bers logistics has been providing logistics services and high quality 3pl outsourcing of integrated logistics services.
NXIT and Franco Vago S.p.a. and Traconf Srl
July 10, 2026
•[ ransomware, manufacturing, technology ]
NXIT and Franco Vago S.p.a. and Traconf Srl was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Italy. Website: www.nipponexpressitalia.com. The leaked files will be available for download on May 15, 2026. Nippon Express Italia SpA (NXIT) is the Italian division of the global NX Group (formerly Nippon Express). It was established on January 1, 2020, following a major merger involving several high-profile Italian logistics companies, including Franco Vago and Traconf . Recorded a consolidated turnover of almost EUR 1 billion in 2022. Core Services: The company specializes in integrated logistics and global freight forwarding, with a particularly strong reputation in the Fashion & Luxury sector. Traconf Srl a major Italian logistics firm specializing in fashion and luxury goods. Portuguese branch of Franco Vago , which, much like Traconf, is now a key part of the Nippon Express Italia SpA (NX Group) network. In Portugal, the company operates as a specialized freight forwarder with a strong focus on the textile, footwear, and luxury sectorsleveraging the historical expertise of the Franco Vago brand. Over 220 gigabytes of sensitive internal data were stolen from this company
Noega and Esnova
July 10, 2026
•[ ransomware, technology, manufacturing ]
Noega and Esnova was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Technology. Country: Spain. Website: esnova.com. Esnova (Esnova Racks S.A.) is a leading Spanish manufacturer specializing in industrial shelving and warehouse storage systems. Based in Gijn, Asturias, the company designs, manufactures, and installs solutions for logistics and warehouse management across more than 35 countries. Noega Systems is a specialized industrial company that designs, manufactures, and installs metal racking and storage solutions. Founded in 2010 and headquartered in Gijn, Spain, the firm provides end-to-end intralogistics services, including technical inspections (ITE) and automated warehouse planning. Over 130 gigabytes of internal data
EXPRESOKNA SP. Z O.O.
July 10, 2026
•[ ransomware, manufacturing ]
EXPRESOKNA SP. Z O.O. was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Poland. Website: expresokna.pl. EXPRESOKNA SP. Z O.O. a Polish manufacturer and distributor specializing in window and door systems. Based in Siemianowice lskie, the company is known for its exceptionally fast turnaround times for PVC and aluminum products.
Bär Cargolift Polska Sp. z o.o.
July 10, 2026
•[ ransomware, manufacturing, leak ]
Br Cargolift Polska Sp. z o.o. was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Transportation. Country: Poland. Website: www.barcargolift.pl. Br Cargolift specializing in the manufacturing of hydraulic tail lifts for vehicles, featuring products with capacities from 500 kg to 3,000 kg. The site offers an online WebShop for spare parts, technical support via Br CargoCheck, and operator training, with a local headquarters in Gdask.
Grupolider | Grupo Actual
July 10, 2026
•[ ransomware, leak, manufacturing ]
Grupolider | Grupo Actual was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Angola. Website: grupolider-ao.com. The leaked files will be available for download on May 10, 2026. Grupolider is a prominent Angolan conglomerate that has been operating in the national market since 1999. Headquartered in Catete, Luanda, the group initially started as a freight forwarding company and has since diversified into a wide range of sectors including agriculture, construction, and furniture. Grupo Actual is a human resources and recruitment agency in Portugal that provides temporary work solutions, permanent recruitment, and selection services.Following a rebranding in late 2025, the company formerly known as Leader now operates under the Actual brand.
SKK Networks Sp. z o.o. and UNICARD Systems Sp. z o. o. and SKK SA
July 10, 2026
•[ ransomware, technology, manufacturing ]
SKK Networks Sp. z o.o. and UNICARD Systems Sp. z o. o. and SKK SA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Poland. Website: www.skk-networks.com/en. SKK Networks is a specialized IT infrastructure provider based in Krakw, Poland, that designs, builds, and maintains professional LAN and WLAN networks. They focus on creating high-performance connectivity solutions for challenging environments like high-bay warehouses, cold storage facilities, and industrial plants. Unicard Systems is a Polish manufacturer and integrator of security and building automation systems with over 30 years of experience. Based in Krakw, the company specializes in designing and implementing proprietary hardware and software solutions for business and public infrastructure. SKK Labels , a prominent Polish label manufacturer and printing company based in Krakw. With over 30 years of experience, the company provides comprehensive product marking solutions across various industries, including pharmaceutical, automotive, and logistics.
PB Sprinkler Engineering Sp. z o.o. and PLISZKA Fire Protection Engineering
July 10, 2026
•[ ransomware, technology, manufacturing ]
PB Sprinkler Engineering Sp. z o.o. and PLISZKA Fire Protection Engineering was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Poland. Website: pliszka.pl/en. PB Sprinkler Engineering (formerly Pliszka Sprinkler) provides comprehensive fire protection solutions, including technical design in 2D and 3D, and customized, certified systems. The company specializes in electronic detection and fixed gas extinguishing systems. Pliszka is a Polish engineering firm based in Gdask with over 30 years of experience specializing in comprehensive active fire protection systems. The company provides design, installation, and maintenance services for automatic extinguishing, fire alarm, and smoke removal systems, along with 24/7 service.
FIRESTA
July 10, 2026
•[ ransomware, manufacturing ]
FIRESTA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Country: Czechia. Website: www.firesta.cz. Firesta-Fier, a.s. is a Czech construction company based in Brno, established in 1990, specializing in transport infrastructure, including bridge, road, and railway construction. With over 600 employees, the company also operates in Slovakia, Poland, and Romania.
Picassent
July 10, 2026
•[ ransomware, government, manufacturing ]
Picassent was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Country: Spain. Website: www.picassent.es. Ayuntamiento de Picassent (Picassent City Council), a municipality located in the Horta Sud region of Valencia, Spain.
Starconn
July 10, 2026
•[ ransomware, technology, manufacturing ]
Starconn was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Technology. Country: Taiwan. Website: www.starconn.com. Starconn (registered as Chief Land Electronic Co., Ltd.) is a top-five connector manufacturer based in Taiwan. Founded in 1978, the company specializes in high-precision connectors for telecommunications, data centers, and consumer electronics. Core Products & Services Connectors: They produce a wide range of connectors, including high-speed backplane (up to 25Gbps), FPC, and EDSFF E1.S connectors. Target Markets: Their components are used in desktops, laptops, LCD panels, servers, storage, and networking equipment. Manufacturing Capabilities: The company integrates plastic mold tooling, micro-injection molding, and automated assembly. Technical Services: They offer R&D partnerships for custom system designs, utilizing CAE software for mechanical and signal integrity simulations. Company Details Headquarters: Wugu District, New Taipei City, Taiwan. Presence: They have significant operations and certifications (ISO 9001, IATF 16949) in both Taipei and Kunshan, China. Intellectual Property: As of 2022, they held over 500 patents.
AKSV
July 10, 2026
•[ ransomware, energy, manufacturing ]
AKSV was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Other. Country: Denmark. Website: aksv.dk. AK Service & Vedligehold is a Hillerd-based contractor providing construction, maintenance, and energy solutions across Zealand, Denmark. The company specializes in electrical work, heat pumps, charging stations, carpentry, and masonry services.
Bombas Ideal
July 10, 2026
•[ ransomware, manufacturing ]
Bombas Ideal was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Country: Brazil. Website: www.bombasideal.com. Bombas Ideal is a Spanish manufacturer established in 1902 specializing in water pumps and pressure systems for agricultural, industrial, and fire protection applications. Based in Valencia, the company offers a range of vertical, submerged, and solar pumping solutions with international operations.
Elmoris
July 10, 2026
•[ ransomware, manufacturing ]
Elmoris was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Country: Lithuania. Website: www.elmoris.lt. Founded in 1996 in Vilnius, Lithuania, UAB Elmoris is a major manufacturer specializing in light metal packaging and "twist-off" lug caps for the food industry. The company is noted for producing PVC-free, environmentally friendly caps and providing metal printing services, holding AEO certification for international trade.
Grupo Mercurio
July 10, 2026
•[ ransomware, manufacturing ]
Grupo Mercurio was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Mexico. Website: www.grupomercurio.mx. Grupo Mercurio is a leading Mexican business conglomerate primarily recognized for its dominance in the bicycle and sports industry. Based in San Luis Potos, the group operates one of the largest bicycle manufacturing plants in Mexico.
Optimal Care SA
July 10, 2026
•[ ransomware, healthcare, manufacturing ]
Optimal Care SA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Healthcare. Country: Argentina. Website: www.optimalcaresa.com. Optimal Care Sociedad Anonima manufactures cleaning applications. The Company offers wet wipes for personal care, baby wipes, make-up remover, multipurpose wipes, and cleaning applications. Optimal Care serves customers in Spain.
Werken Química Brasil S.A.
July 10, 2026
•[ ransomware, manufacturing ]
Werken Qumica Brasil S.A. was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Country: Brazil. Website: www.werken.com.br. Werken Qumica Brasil S.A. is a company specializing in the development and supply of chemical products, headquartered in Indaial, Santa Catarina. It operates primarily within the textile industry, offering solutions for pretreatment, dyeing, printing, yarn lubrication, and effluent treatment, with a focus on functional technologies.
Güven Mühendislik Makina
July 10, 2026
•[ ransomware, manufacturing ]
Gven Mhendislik Makina was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Country: Turkey. Website: gmm.com.tr.
WH Müller
July 10, 2026
•[ ransomware, manufacturing, technology ]
WH Mller was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Country: Germany. Website: www.whm.de. WH Mller is a family business in the field of electrical engineering and IT technology.
Weinberg ''93 Építő Kft.
July 10, 2026
•[ ransomware, manufacturing, financial ]
Weinberg ''93 pt Kft. was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Country: Hungary. Website: weinberg.hu. Weinberg ''93 pt Kft., a prominent Hungarian construction and steel fabrication company. Overview: Founded in 1993 and headquartered in Srospatak, it is a 100% privately owned Hungarian company. Core Services: The firm specializes in general contracting and the manufacture of complex steel structures. Major Projects: They have handled significant industrial developments, including: - Volvo Trucks Hungary: Completed a 5,500 m advanced truck center in Ecser. - Continental Automotive: Construction of electronics manufacturing plants. - East Gate PRO Business Park: Developed BREEAM-certified sustainable warehouses. - Becton Dickinson: Expansion of a major syringe factory in Hungary. Recognitions: The company has received numerous awards, such as the Lechner dn Award (2024) and the Steel Structure Award (2022). Over 650 gigabytes of sensitive internal data were stolen from this company: all commercial information about contractors, information about specialized construction technologies and metal structure production, internal financial transactions, and operations demonstrating corruption in construction projects. We invite all journalists, lawyers, and law enforcement agencies to review this information.
