Fluge Audiovisuales targeted by Lamashtu ransomware group

• Ransomware group: Lamashtu
• Country: Spain
• Announcement date: October 5, 2026

Lamashtu claims data breach at Fluge Audiovisuales

The ransomware group known as Lamashtu has announced a data leak allegedly belonging to the Spanish organization Fluge Audiovisuales. According to the claim made on the group's leak site on October 5, 2026, the threat actors have exfiltrated a significant volume of information, claiming to possess approximately 40 GB of data.

This type of announcement is a common tactic used in double extortion ransomware attacks. In these scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive data to use as leverage. By threatening to publish the stolen information on a public leak site, the group attempts to pressure the victim into paying a ransom to prevent the disclosure of confidential records.

Details of the alleged exfiltration

The threat actor known as Lamashtu claims to have exfiltrated 95,000 files belonging to Fluge Audiovisuales and its various subsidiaries. The announcement states that the dataset covers operational activities spanning from 2022 to 2026. The group has listed the data on its leak site, which is likely part of an extortion attempt against the organization.

The alleged dataset is reported to be quite diverse, encompassing various types of sensitive documentation. Based on the group's claims, the following data types are included in the leak:

• Identity documents
• Tax filings
• Payroll records
• Supplier payment registers
• Medical fitness certificates
• CAD drawings
• Digital certificates
• Email archives
• Accounting spreadsheets

The inclusion of such a wide variety of files suggests that the attackers may have gained access to administrative staff workspaces, which often contain critical business intelligence and personal employee information.

About Fluge Audiovisuales

Fluge Audiovisuales is a Spanish company specializing in the rental of sound, lighting, video, and staging equipment. Their services cater to a wide range of professional needs, including concerts, festivals, corporate events, television, and film productions. The organization is a market-leading entity that operates across multiple cities within Spain.

Potential impact and risks

This incident may pose significant risks due to the potential exposure of personal data belonging to employees and suppliers of Fluge Audiovisuales. As an entity operating in Spain, the organization may face regulatory scrutiny under GDPR requirements. The inclusion of identity and tax documents could lead to identity theft or targeted phishing attacks against the affected individuals.

Furthermore, the exposure of CAD drawings and accounting data may result in competitive disadvantages for the firm. While information regarding the Lamashtu group remains limited, the potential for secondary exploitation of the leaked data remains high. For organizations in the audiovisual and event production sector, protecting intellectual property such as technical drawings and maintaining strict access controls over financial and personal data is essential to mitigate these types of risks.