Rotak.it listed on m3rx ransomware leak site

• Ransomware group: m3rx
• Country: Italy
• Sector: Technology
• Announcement date: April 29, 2026

M3rx claims data breach against rotak.it

The ransomware group known as m3rx has listed the Italian organization rotak.it on its dedicated leak site. According to the announcement made on April 29, 2026, the threat actor group claims to have successfully exfiltrated data from the target organization during an attack that allegedly occurred on the same day.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also focus on stealing sensitive information before the encryption phase. The threat actors then threaten to publish this stolen data on public leak sites if their demands are not met. This method increases the pressure on the victim, as the exposure of confidential information can lead to significant reputational and legal consequences even if the organization can restore its systems from backups.

Details of the alleged exfiltration

The m3rx group has provided specific metrics regarding the scale of the alleged breach. The group claims that the compromised data consists of a significant volume of information, specifically totaling 22.5 GB. This dataset is reported to contain approximately 20,000 files.

Regarding the specific nature of the stolen information, the listing does not provide details on the exact types of files or the content of the data. While the specific contents remain unconfirmed, the operational scope of the target suggests that technical and commercial documents could potentially be included in the cache of stolen data.

About rotak.it

Rotak is an Italian company that operates within the technology sector. The organization specializes in the distribution of medical and analytical instrumentation. In addition to its work with medical tools, the company also maintains operations in the fields of industrial engineering and automation.

Potential implications and defensive considerations

This incident highlights a potential risk of exposure for sensitive corporate data held by rotak.it. Because the organization is based in Italy, a confirmed breach could lead to legal repercussions and notification obligations under the General Data Protection Regulation (GDPR). The publication of such data may result in the disclosure of trade secrets and could negatively impact the organization's supply chain. Furthermore, if the leaked data includes employee or customer information, it may create opportunities for identity theft or targeted phishing attacks.

For organizations operating in technical and industrial sectors, such incidents underscore the importance of robust cybersecurity postures. Common defensive steps for organizations include implementing multi-factor authentication (MFA) across all remote access points, maintaining offline and immutable backups to mitigate the impact of encryption, and conducting regular security awareness training to defend against phishing. Additionally, monitoring for unauthorized data exfiltration and implementing strict network segmentation can help limit the movement of attackers within a corporate environment. Publicly available information regarding the m3rx group remains limited, making it difficult to attribute specific tactics or long-term patterns to this particular threat actor.