iASK listed on Deadlock ransomware leak site

• Ransomware group: Deadlock
• Country: Hungary
• Sector: Technology
• Announcement date: July 10, 2026

Deadlock claims breach of iASK systems

The Hungarian research center, the Institute of Advanced Studies Kőszeg (iASK), has been listed on the leak site of the ransomware group known as Deadlock. The threat actor claims to have successfully gained access to the institution's internal systems and asserts that various data sets have been obtained during the operation.

The announcement was posted on July 10, 2026. According to the information provided by the threat actor, the group has published a directory structure that they claim belongs to the iASK institution. This type of activity is common in modern ransomware campaigns, where attackers use the threat of leaking sensitive information to pressure organizations into meeting ransom demands.

The scope of the alleged data leak

While the specific volume of data and the exact number of files involved have not been disclosed by the group, the directory structure shown in the leak site announcement suggests a significant breadth of information. The screenshots provided by the threat actor display several folder directories that indicate the nature of the targeted information.

The directories identified in the leak include various administrative and sensitive categories. Based on the provided information, the following types of data are allegedly involved in the breach:

• Student data
• Financial records
• Administrative documents

The presence of these specific directories suggests that the attackers may have targeted core operational areas of the institution.

About the Institute of Advanced Studies Kőszeg (iASK)

The Institute of Advanced Studies Kőszeg (iASK) is a research center located in Hungary. The institution focuses its efforts on interdisciplinary studies, regional transformation, and sustainability. As an academic and research-oriented entity, iASK conducts various international academic collaborations and serves as a host for various research programs.

Analysis and potential impact

The claims made by the Deadlock group present several significant risks to the institution. This leak claim may bring the risk of exposure for student and personnel information within iASK. Because the institution operates within Hungary, any potential data breaches may be evaluated under the framework of the European Union's General Data Protection Regulation (GDPR).

The inclusion of financial records among the allegedly leaked data is particularly concerning. The exposure of such information may increase the likelihood of the institution and associated individuals being exposed to identity theft or targeted phishing attacks. Furthermore, the potential leak of administrative and student-related documents suggests that the institution's academic and administrative processes may be at risk of disruption due to the documents allegedly leaked.

In the broader context of cybersecurity, ransomware groups often utilize a "double extortion" tactic. In these scenarios, attackers not only encrypt the victim's data to disrupt operations but also steal sensitive information to use as leverage during negotiations. This increases the pressure on the victim, as the threat of public exposure of sensitive data remains even if the organization can restore its systems from backups.

Organizations operating in the research and academic sectors often handle vast amounts of intellectual property, personal student data, and sensitive financial information, making them attractive targets for such actors. To mitigate these risks, organizations typically focus on several defensive pillars. Implementing robust access controls and multi-factor authentication can help prevent unauthorized entry. Regular monitoring of network traffic can assist in detecting anomalous behavior that might indicate an intrusion in progress. Additionally, maintaining offline, immutable backups is a critical component of a resilient recovery strategy.

As of the current report, public information regarding the Deadlock group remains limited. The incident highlights the ongoing challenges faced by research institutions in protecting sensitive academic and administrative data from sophisticated threat actors.