EDISA and INVERTIGE listed on Deadlock ransomware leak site

• Ransomware group: Deadlock
• Country: Spain
• Sector: Professional Services
• Announcement date: July 10, 2026

Deadlock claims data breach against EDISA and INVERTIGE

The Deadlock ransomware group has officially listed the Spanish companies EDISA and INVERTIGE on its dedicated leak site. This announcement, made on July 10, 2026, constitutes a claim of a data breach against the two entities. While the listing appeared on the group's platform, the specific details regarding the nature of the alleged compromise remain limited at this stage.

Ransomware groups often utilize leak sites as a method of double extortion. In such scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive information to use as leverage. By threatening to publish stolen data on a public platform, the threat actors aim to pressure the victim into paying a ransom to prevent the exposure of confidential information. This tactic significantly increases the pressure on organizations, as the leak of data can lead to severe reputational damage and legal consequences.

Details of the alleged incident

According to the information provided by the Deadlock group, the incident was announced on July 10, 2026, which coincides with the date the group claims the attack took place. However, the current state of the leak site provides very little clarity for investigators or the public. The associated leak page does not provide a list of files or any data samples to substantiate the claim.

Furthermore, attempts to access the content on the leak site have been met with technical barriers. A provided screenshot indicates that the content is currently inaccessible, returning an HTTP 403 error. This lack of accessibility, combined with the absence of a file directory, makes it difficult to verify the validity of the group's claims or the scale of the purported breach.

Nature of the involved data

The listing names no specific data types involved in the alleged breach.

Organization profiles

The targeted entities, EDISA and INVERTIGE, are professional services firms located in Valencia, Spain. EDISA, formally known as Estudios de Investigación Servicio SL, and INVERTIGE SL operate as holding and consultancy companies. Their professional focus includes specialized services in asset management, real estate development, and corporate governance.

Risk assessment and industry implications

Publicly available information regarding the Deadlock group remains limited, making it difficult to determine their specific tactics, techniques, and procedures. Because the affected organizations are based in Spain, any confirmed data breach would likely trigger significant legal obligations under the General Data Protection Regulation (GDPR), which governs data privacy within the European Union. The ambiguity surrounding the types of data involved makes it challenging to assess the immediate risks to the clients or employees of these institutions.

If the data is eventually verified and released, secondary risks could include identity theft or the execution of targeted phishing attacks against the individuals whose information was compromised. Given that the organizations specialize in asset management, consultancy, and corporate governance, there is a significant possibility that trade secrets or sensitive financial data could be at risk, though this remains unconfirmed.

Organizations operating within the professional services and consultancy sectors can take several defensive steps to mitigate the impact of such threats. Implementing robust data encryption for data at rest and in transit is a fundamental practice. Additionally, maintaining strict access controls and multi-factor authentication can help prevent unauthorized access to sensitive client and corporate information. Regular security audits and comprehensive incident response plans are also essential for managing the fallout of a potential breach and ensuring compliance with regional data protection regulations.