CAD93 listed on Deadlock ransomware leak site

• Ransomware group: Deadlock
• Country: Italy
• Sector: Manufacturing
• Announcement date: June 15, 2026

Deadlock claims cyberattack against CAD93

The Deadlock ransomware group has officially listed the Italian organization CAD93 on its dedicated leak platform. According to the claims made by the threat actor group, the organization was subjected to a cyber incident on May 22, 2026. The announcement regarding this alleged breach was made public on the group's leak site on June 15, 2026.

In many modern ransomware operations, threat actors utilize leak sites to pressure victims into paying ransoms. This tactic is often part of a double extortion strategy, where attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive information to threaten its public release. By listing a victim on a public platform, the group aims to increase visibility and pressure the target through reputational damage.

The current evidence provided by the group is limited. A screenshot associated with the listing indicates that the relevant data directory is currently inaccessible, returning an HTTP 403 error. This lack of immediate visibility makes it difficult to verify the current status of the alleged stolen files.

Details regarding the alleged data leak

At this stage, the information regarding the specific nature of the data allegedly leaked remains unclear. The listing does not provide details concerning the volume of the data or the specific file counts involved. Furthermore, there is no information regarding a ransom demand or the specific types of files that were targeted during the incident.

The listing names no specific data types.

When investigating such incidents, it is common for analysts to find that the contents of a directory appear empty or inaccessible during the initial stages of a leak. This can occur due to various technical reasons or as a tactical move by the ransomware group to control the timing of information disclosure. Until the content of the data is clarified, it is not possible to make a definitive assessment regarding the scale and impact of the leak.

About CAD93

C.A.D. 93 S.r.l. is an authorized customs brokerage firm based in Prato, Italy. The company provides consulting services specializing in international trade, regulatory compliance, and import/export documentation. Given its role in the manufacturing and trade sectors, the organization handles significant amounts of documentation related to the movement of goods across borders.

Risk assessment and industry implications

Public information regarding the Deadlock group remains limited, making it difficult to establish a comprehensive profile of their tactics, techniques, and procedures. However, the targeting of a customs brokerage firm presents specific risks. Because the organization's operations involve international trade, regulatory compliance, and import/export documentation, there is a potential risk that any leaked documents could contain trade secrets or sensitive client data.

Since the entity is based in Italy, a potential data breach could trigger legal processes under the General Data Protection Regulation (GDPR). Such regulatory frameworks impose strict requirements on how personal data must be protected and how breaches must be reported to authorities and affected individuals. Beyond legal and regulatory risks, organizations in this sector may face operational disruptions and secondary risks to third parties who rely on their documentation and compliance services.

To mitigate such risks, organizations in the manufacturing and trade sectors often implement defensive measures such as robust access controls, regular security awareness training, and comprehensive data encryption. Maintaining strict oversight of third-party integrations and ensuring compliance with international trade regulations are also vital components of a modern cybersecurity posture. As the situation regarding CAD93 evolves, the industry will continue to monitor the impact of this incident on the customs brokerage sector.