Elmoris listed on Deadlock ransomware leak site

• Ransomware group: Deadlock
• Country: Lithuania
• Announcement date: July 10, 2026

The Lithuanian food packaging manufacturer Elmoris has been listed on the leak site of the Deadlock ransomware group. The group claims to have gained unauthorized access to the organization's systems, marking a potential security incident for the Vilnius-based company.

The claimed attack and group activity

According to the announcement made on July 10, 2026, the Deadlock group has added Elmoris to its platform for victims. The group asserts that they have successfully breached the organization's digital infrastructure. However, information regarding this specific threat actor remains limited, as there is very little publicly available data concerning the group's specific methods, motivations, or historical patterns of operation.

At the time of the announcement, the group provided a screenshot as evidence of the breach. This screenshot, however, does not contain any actual data samples or evidence of stolen files. Instead, the image merely displays an access error message, which provides no further insight into the extent of the intrusion or the specific systems that were compromised during the alleged attack.

Data involvement and content

Regarding the specific nature of the information involved in this incident, there is currently no information regarding the nature of the leaked data. The provided evidence fails to demonstrate the content of any stolen files. The listing does not name any specific data types, and there is no information available regarding the total size of the data or the number of files involved.

About Elmoris

UAB Elmoris is a manufacturing company founded in 1996 and headquartered in Vilnius, Lithuania. The organization specializes in the production of light metal packaging and "twist-off" lug caps designed for the food industry. Their product line focuses on environmentally friendly, PVC-free caps and also includes specialized metal printing services.

Potential impacts and industry implications

If the claims made by the Deadlock group are verified, the organization may face several significant consequences. From a commercial standpoint, the breach could negatively impact the company's ongoing business operations and its various international trade certifications. Furthermore, as a business operating within Lithuania, any confirmed data breach may trigger legal obligations under the EU General Data Protection Regulation (GDPR).

The potential loss of data also introduces secondary risks that extend beyond the organization itself. There is a possibility that the breach could affect the security and operations of the organization's supply chain partners and customers. Additionally, such an incident can create a foundation for targeted phishing attacks aimed at the organization's employees or its business partners.

In the broader context of cybersecurity, ransomware groups often employ double extortion tactics, where they not only encrypt an organization's data but also threaten to leak sensitive information on public platforms to pressure the victim into paying a ransom. While the scale of the current risk remains uncertain due to the lack of data regarding the group's methods, organizations in the manufacturing and food supply sectors often prioritize the protection of intellectual property and supply chain integrity to mitigate such risks. Defensive measures typically involve implementing robust access controls, maintaining regular offline backups, and conducting employee training to recognize social engineering attempts.