Enedo Power listed on Deadlock ransomware leak site

• Ransomware group: Deadlock
• Country: Finland
• Sector: Energy & Utilities
• Announcement date: July 25, 2026

Deadlock claims data breach at Enedo Power

The threat actor known as Deadlock has listed Enedo Power on its dedicated leak site, claiming to have successfully gained access to the company's internal data. This announcement, made on July 25, 2026, follows a pattern often seen in modern ransomware operations where groups utilize leak sites to pressure victims through the threat of public data exposure.

In this specific incident, the group has provided a screenshot as evidence to support their claim. This visual evidence displays various file directories belonging to the organization, suggesting that the attackers have navigated through the company's file systems. While the presence of such screenshots is common in double extortion tactics—where attackers not only encrypt data but also threaten to leak it—the full scope and specific content of the data involved in this particular claim remain unknown at this time.

Details of the alleged data exposure

The evidence provided by the Deadlock group consists of screenshots showing several directory names within the organization's environment. Based on the available information, the visible directories include:

• CLOSED_FOLDERS
• Shared_Folders
• TestStationData

Despite the visibility of these directory names, the specific files contained within them and the total volume of the data allegedly exfiltrated have not been disclosed by the threat actor. No information has been provided regarding the total size of the data, the specific file counts, or any ransom demands associated with this claim.

About Enedo Power

Enedo Power, which has been renamed Inission Power, is a company that develops intelligent power supply systems designed for critical infrastructure and industrial applications. As a member of the Swedish Inission Group, the company specializes in the production of power systems and LED drivers. Their technology serves highly sensitive and vital sectors, including defense and railway technology.

Potential implications and security considerations

This incident may pose a significant risk of exposing sensitive technical data related to Enedo Power's various industrial and critical infrastructure projects. Given the specialized sectors in which the company operates, such as defense and railway technology, the leak could potentially have negative implications for broader supply chain security. When companies providing components for critical infrastructure are targeted, the ripple effects can extend to the many organizations that rely on their technology.

Because the company is based in Finland, this incident may lead to legal consequences and formal compliance processes under the European Union's General Data Protection Regulation (GDPR). Organizations operating within the European Union must navigate complex regulatory frameworks when data breaches are suspected or confirmed.

Regarding the threat actor, information concerning the Deadlock group is limited; therefore, it is difficult to draw definitive conclusions about the group's specific motivations or their operational methods. In such scenarios, organizations often face secondary risks, such as targeted phishing attacks or the theft of intellectual property. To mitigate these risks, it is common for organizations to implement enhanced monitoring, strengthen access controls, and prepare for potential follow-on social engineering attempts.