ALP-001 ransomware group lists lacor.es on its leak site

• Ransomware group: ALP-001
• Country: Spain
• Sector: Manufacturing
• Announcement date: March 29, 2026

A new data breach claim against lacor.es

The threat actor group known as ALP-001 has officially listed the Spanish manufacturing company lacor.es on its leak site. This announcement, made on March 29, 2026, indicates a potential data breach involving the organization. The listing serves as a public claim by the threat actor that they have successfully targeted the company and obtained sensitive information.

In modern cyberattack landscapes, threat actors often utilize leak sites to pressure victims. These platforms are used to host stolen data or to announce the successful compromise of an organization. This tactic is frequently associated with double extortion, where attackers not only encrypt a company's systems to disrupt operations but also threaten to release sensitive data to the public to increase the pressure to pay a ransom.

Details of the alleged attack

According to the claims made by the ALP-001 group, the threat actor conducted reconnaissance activities on March 29, 2026. The group asserts that they have acquired a significant volume of data belonging to lacor.es. The listing specifies a deadline of April 8, 2026, which is a common tactic used by ransomware groups to create a sense of urgency for the victim.

The group has not provided any specific details regarding the content of the alleged leaked data, other than the total storage size. No information has been provided regarding the specific file types or the nature of the documents involved in this incident.

Claimed data characteristics

• Total data size: 182.71 GB

The listing names no specific data types or categories of information that have been compromised.

About lacor.es

Lacor is a Spanish company specializing in the design and manufacture of kitchenware, pots, pans, and professional catering equipment. Founded in 1949, the company offers a wide range of products for both home and professional kitchens.

Potential risks and organizational implications

This incident may pose potential risks to the organization's operational continuity and data privacy. As the company operates in Spain, any confirmed data breach could lead to legal sanctions and administrative fines under GDPR. The publication of data may result in secondary risks for employees and business partners, such as identity theft or targeted phishing attacks.

Information regarding the ALP-001 group is limited, and the group's specific motivations remain unclear. When organizations face such claims, it is often advisable to initiate an urgent digital forensic investigation to verify the claims of the breach and determine the actual extent of the compromise.

For companies in the manufacturing sector, maintaining robust cybersecurity posture is critical to protecting intellectual property and supply chain integrity. Common defensive steps for organizations include implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Furthermore, continuous monitoring of network traffic and regular vulnerability assessments can help identify potential reconnaissance activities before they escalate into full-scale breaches.