Acros Sport GmbH allegedly targeted by Lamashtu ransomware group

• Ransomware group: Lamashtu
• Country: Germany
• Sector: Manufacturing
• Announcement date: May 8, 2026

The ransomware group known as Lamashtu has listed a significant dataset on its leak site, claiming the information belongs to the German manufacturing firm Acros Sport GmbH. According to the announcement made on May 8, 2026, the threat actor alleges they have successfully exfiltrated a substantial amount of sensitive corporate data.

The alleged attack and claims by Lamashtu

The threat actor known as Lamashtu has listed data allegedly belonging to Acros Sport GmbH on their leak site. The group claims to have exfiltrated a 30 GB dataset containing sales, procurement, and engineering documentation spanning from 2023 to 2026. This alleged breach involves a vast collection of approximately 50,000 files, representing a significant volume of corporate intelligence.

The announcement further alleges that internal email stores and digital certificates for German tax filing systems have been compromised. In modern cyberattack patterns, such as double extortion, ransomware groups often move beyond simple encryption to stealing sensitive data to leverage against the victim. By threatening to release this information on a public leak site, attackers aim to maximize pressure on the target organization to meet their demands.

The scope of the allegedly compromised data

The data allegedly stolen by the Lamashtu group is diverse, covering technical, commercial, and administrative aspects of the company's operations. The group claims the stolen information includes the following items:

• Customer engineering drawings
• OEM pricing agreements
• Non-disclosure agreements
• Invoice archives
• Customs and tax documentation
• Internal email stores
• Tax filing digital certificates

The inclusion of such varied data types suggests a deep intrusion into the company's digital infrastructure, potentially touching upon both technical intellectual property and sensitive financial administration.

About Acros Sport GmbH

Acros Sport GmbH is a high-end bicycle component manufacturer based in Renningen, Germany, founded in 1999. The company specializes in precision bearing technology for cycling.

Implications and security considerations

This leak claim may pose a risk of exposing sensitive commercial and technical data belonging to Acros Sport GmbH. The company's supply chain relationships and intellectual property rights could be impacted by such a data breach. As the company is based in Germany, the incident may trigger data breach notification requirements under GDPR.

Furthermore, the exposure of tax certificates and email archives could facilitate targeted phishing attacks against employees or business partners. When internal communications and official digital certificates are compromised, it becomes significantly easier for attackers to impersonate legitimate entities, leading to sophisticated social engineering campaigns. Information regarding the Lamashtu group is limited.

If these claims are validated, the company's operational continuity and commercial reputation may be negatively affected. In the manufacturing sector, maintaining the integrity of engineering drawings and OEM agreements is vital for competitive advantage and trust with partners. Organizations facing similar threats often focus on strengthening their perimeter defenses, implementing robust multi-factor authentication, and ensuring that sensitive documentation and digital certificates are stored in highly secure, segmented environments to mitigate the impact of such exfiltration events.