Steelco listed on AuditTeam leak site claiming data breach

• Ransomware group: AuditTeam
• Country: Italy
• Sector: Manufacturing
• Announcement date: October 1, 2026

AuditTeam claims data breach against Steelco

The ransomware group known as AuditTeam has published a notice on its leak site, claiming that it has acquired data belonging to the Italian-based medical device manufacturer, Steelco. According to the announcement made on October 1, 2026, the group asserts that the organization's remediation window has expired and that the stolen information has been made public.

Ransomware attacks often follow a pattern of double extortion, where threat actors not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive data to use as leverage. By threatening to release this information on a public leak site, attackers aim to pressure the victim into paying a ransom to prevent the exposure of proprietary or sensitive information. In this instance, the AuditTeam group has listed Steelco on its platform, alleging they have successfully obtained data from the company.

Details of the alleged event

The announcement by AuditTeam focuses on the fact that the organization's data has been compromised. The group's post notes that the company specializes in the production of cleaning, disinfection, and sterilization equipment. The group further claims that because the designated period for the organization to respond or remediate the situation has passed, the data has been released to the public.

The listing does not provide any specific details or sample content regarding the nature of the leaked data. Furthermore, the announcement does not specify the volume of data involved, the number of files stolen, or the specific ransom demand requested by the attackers.

Organization profile

Steelco is an Italian-based medical device company that manufactures cleaning, disinfection, and sterilization equipment for hospitals, laboratories, and the pharmaceutical industry. The company has a significant corporate history, having joined the Miele Group in 2017. In 2024, the company underwent a strategic merger with Belimed to form SteelcoBelimed AG.

Risk assessment and industry implications

This claim suggests that sensitive commercial and operational information may be at risk, given Steelco's position in the medical device sector. Because the organization is based in Italy, a potential data breach could lead to legal and administrative sanctions under the EU General Data Protection Regulation (GDPR). Organizations operating within the European Union must adhere to strict protocols regarding data protection, and failures in security can result in significant regulatory oversight.

The potential impact of such a breach extends beyond the organization itself. Supply chain partners and customers of a medical device manufacturer may face secondary risks, such as targeted phishing attacks, if the stolen information contains contact details or operational workflows. When attackers gain access to a manufacturer, they often seek to leverage that access to move laterally into the networks of their clients or partners.

Regarding the threat actor, information about the AuditTeam group is limited; therefore, no definitive assessment can be made regarding their specific methods or motivations. For organizations in the manufacturing and medical sectors, it is often considered prudent to initiate internal audit processes to verify such claims and to notify relevant data protection authorities as a precautionary measure. Maintaining robust incident response plans and continuous monitoring are standard defensive steps to mitigate the impact of such identified threats.