Astidental di Sabbione listed on lamashtu ransomware leak site

• Ransomware group: lamashtu
• Country: Italy
• Sector: Manufacturing
• Announcement date: September 30, 2026

Lamashtu claims data breach at Astidental di Sabbione

The Italian dental equipment distributor Astidental di Sabbione has been listed on the lamashtu ransomware group's leak site. According to the claims made by the threat actor, the group has exfiltrated 85 GB of data belonging to the organization.

Ransomware attacks often involve a tactic known as double extortion, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information. By threatening to publish this data on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of proprietary or sensitive information. This method increases the pressure on companies, as the leak of data can lead to significant reputational damage, regulatory scrutiny, and legal consequences.

Details of the alleged theft

The threat actor known as lamashtu claims to have accessed a vast amount of information, reportedly spanning from the year 2020 to 2026. The group alleges that the breach involves approximately 230,000 files. Information regarding the specific identity and background of this threat group remains limited in the public domain.

The data allegedly leaked by the group is highly sensitive and covers various aspects of the company's operations. The claimed data includes:

• Financial records
• Employee payroll data
• Medical equipment documentation
• Diagnostic records
• DICOM medical imaging files
• Supplier agreements

The presence of such diverse data types suggests a broad compromise of the organization's digital environment, touching upon administrative, financial, and clinical information.

About Astidental di Sabbione

Astidental di Sabbione is a leading Italian distributor with over 60 years of experience specializing in dental equipment, instruments, and dental laboratory supplies. The company provides comprehensive services, including dental office turnkey design and digital workflow solutions.

Potential risks and industry implications

The nature of the allegedly leaked data may pose significant risks to the organization's stakeholders. For the company's employees and clients, the exposure of such information could lead to risks of identity theft or the deployment of targeted phishing attacks. Because the company is based in Italy, this incident may fall under the scope of the European Union's General Data Protection Regulation (GDPR), which imposes strict requirements on how personal data is handled and protected.

Furthermore, the presence of medical imaging and diagnostic records may create additional risks regarding patient privacy. The exposure of commercial and financial data could also affect the company's competitive advantage and may lead to secondary extortion attempts by the attackers. In the manufacturing and distribution sectors, such breaches can disrupt supply chains and damage long-term business relationships.

To defend against such threats, organizations typically implement a multi-layered security strategy. This includes robust backup solutions that are stored offline or in immutable environments to ensure data can be recovered without paying a ransom. Additionally, implementing strict access controls, multi-factor authentication (MFA), and continuous monitoring of network traffic can help detect and mitigate unauthorized access before large-scale data exfiltration occurs. Regular security awareness training is also vital to help employees recognize phishing attempts, which are often the initial entry point for ransomware actors.