Perlite, S.L.U targeted by nightspire ransomware group

• Ransomware group: nightspire
• Country: Spain
• Sector: Manufacturing
• Announcement date: February 14, 2026

Nightspire claims data breach at Perlite, S.L.U

The ransomware group known as nightspire has published an announcement on its leak site claiming that data belonging to the organization Perlite, S.L.U has been leaked. According to the claims made by the threat actor, the institution was compromised on January 16, 2026, and the announcement was officially posted on the group's leak site on February 14, 2026. While the group has claimed responsibility for the incident, public information regarding the specific methods, motivations, or technical details of this group remains limited.

In many modern ransomware campaigns, threat actors employ a strategy known as double extortion. In this scenario, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information before the encryption process begins. The threat actors then use the stolen data as leverage, threatening to publish it on public leak sites if a ransom demand is not met. This tactic increases the pressure on the victim, as the threat of a data leak can cause significant reputational and legal damage even if the organization can restore its systems from backups.

Details of the alleged exfiltration

The nightspire group alleges that the breach resulted in the theft of approximately 100 GB of data. While the group has provided information regarding the volume of the stolen data, no specific file count or ransom demand has been disclosed in the announcement. Furthermore, no screenshots were provided by the group to verify the contents of the stolen information.

According to the claims made by the attackers, the leaked data consists of the following types of information:

• Technical drawings
• Client data

The exposure of such specific datasets can have cascading effects on an organization's operations and its relationship with its partners and customers.

Potential risks and organizational impact

The alleged data leak poses several significant risks to Perlite, S.L.U. The exposure of technical drawings represents a direct threat to the institution's intellectual property and trade secrets. If these sensitive documents are shared with competitors, the organization could suffer a loss of competitive advantage in the manufacturing sector.

Furthermore, the exposure of customized client data carries heavy regulatory implications. Under the European Union's General Data Protection Regulation (GDPR), the unauthorized disclosure of personal data can lead to severe legal sanctions and administrative fines. Beyond the regulatory consequences, the victims of the data breach—the clients themselves—may face secondary risks. If the leaked information is misused by malicious actors, it could lead to identity theft or highly targeted phishing attacks directed at the organization's business partners.

Because there is insufficient data currently available regarding the specific methods used by nightspire, organizations facing similar threats should consider the potential for secondary attack risks. Defensive strategies typically involve implementing robust network segmentation, maintaining strict access controls, and conducting regular security audits to detect unauthorized exfiltration. For organizations in the manufacturing sector, protecting intellectual property through encryption and monitoring data movement is a critical component of a comprehensive cybersecurity posture.