Casta Diva Group listed on PayoutsKing leak site

• Ransomware group: PayoutsKing
• Country: Italy
• Sector: Hospitality
• Announcement date: July 14, 2026

Casta Diva Group targeted by PayoutsKing

The international communication group Casta Diva Group has been listed on a leak site by a threat actor known as PayoutsKing. The listing, which appeared on July 14, 2026, follows a claimed attack against the organization's systems that allegedly took place on July 6, 2026. This development highlights the ongoing risks faced by large-scale communication and production firms in the digital age.

Details of the claimed attack

According to the announcement made by the PayoutsKing group, the organization's systems were targeted in an action that occurred approximately eight days prior to the public listing. In many modern ransomware scenarios, threat actors utilize a method known as double extortion. In such cases, attackers not only encrypt an organization's data to disrupt operations but also exfiltrate sensitive information to use as leverage. By threatening to release this data on a public leak site, the actors attempt to pressure the victim into paying a ransom to prevent the exposure of proprietary or personal information.

Despite the public nature of the listing, the announcement remains vague regarding the specifics of the intrusion. The threat actor has not provided any details concerning a specific ransom demand, nor have they provided any evidence or samples to substantiate the claim of a successful breach. The lack of immediate documentation makes it difficult to verify the scope of the incident at this stage.

Information regarding compromised data

At this time, there is no information available regarding the nature of the leaked or compromised data. The listing does not specify the volume of data involved or the number of files that may have been accessed. Specifically, the announcement names no data types.

About Casta Diva Group

Casta Diva Group is an international communication group that operates across several specialized fields, including advertising, corporate events, and digital content production. The company is known for providing creative solutions and a variety of production services for various brands on a global scale.

Potential risks and organizational impact

This incident may pose potential risks to the operational continuity of Casta Diva Group. Because the organization is based in Italy, any potential data breach could lead to legal sanctions and notification obligations under the General Data Protection Regulation (GDPR). Such regulatory frameworks are designed to ensure that organizations protect personal data and notify authorities and affected individuals when a breach occurs.

The threat actor, PayoutsKing, currently has a limited public profile, leaving their specific motivations and technical methods uncertain. This uncertainty adds a layer of complexity to the situation, as it is difficult to predict the group's next moves or the ultimate goal of the attack. Furthermore, secondary risks may arise for the organization's customers and employees, such as the threat of identity theft or the possibility of targeted phishing attacks using information potentially obtained during the breach.

For organizations operating in the communication and media sectors, maintaining robust security postures is essential. To mitigate such risks, companies often implement defensive measures such as multi-factor authentication, regular security audits, and comprehensive employee training to recognize social engineering attempts. Reviewing security vulnerabilities and taking proactive measures against potential data leaks is a critical component of modern cybersecurity management.