Stormous claims data breach against ams-group.co.uk

• Ransomware group: Stormous
• Country: United Kingdom
• Sector: Professional Services
• Announcement date: May 10, 2026

Stormous claims a major data leak against ams-group.co.uk

The ransomware group known as Stormous has announced on its leak site that it has successfully exfiltrated a significant amount of data belonging to ams-group.co.uk. According to the group's announcement, which was posted on May 10, 2026, the breach involves a total of 33 GB of stolen information. This announcement follows the group's claim that the actual attack took place on May 9, 2026.

Ransomware groups often utilize leak sites to host stolen data as a method of double extortion. In these scenarios, threat actors not only encrypt an organization's systems to disrupt operations but also steal sensitive information to pressure the victim into paying a ransom. By publishing data on a public-facing leak site, the group aims to maximize the reputational damage and legal pressure exerted on the target organization.

Details of the alleged breach

The threat actor, Stormous, alleges that the breach resulted in the theft of a wide array of sensitive documentation. The group claims that the exfiltrated data includes both administrative and financial records. The stolen information is reportedly being made available for access via the group's dedicated leak site.

The specific types of data mentioned in the claim include a vast range of corporate and technical files. The alleged data set consists of the following:

• Administrative records
• Financial records
• Payroll sheets
• Client and partner information
• Technical and engineering specifications
• Employee records
• Business plans
• Architectural designs
• Official contracts
• Engineering reports
• Construction site maps
• Risk assessments
• Internal correspondence
• Tax and legal information

While the group has provided a detailed list of the types of information they claim to possess, it is important to note that no screenshots of the data have been provided to validate these claims.

About ams-group.co.uk

AMS Group is a professional services and engineering firm based in the United Kingdom. The company operates in the fields of architectural design, construction projects, and technical engineering solutions.

Potential impact and industry implications

This alleged breach poses several significant risks to ams-group.co.uk and its stakeholders. The exposure of employee and client information increases the risk of identity theft and makes individuals within the organization's network targets for highly specific, targeted phishing attacks. Furthermore, the theft of technical and engineering specifications, architectural designs, and detailed engineering reports could lead to the disclosure of proprietary trade secrets, potentially resulting in a loss of competitive advantage for the firm.

Because the organization is based in the United Kingdom, this incident may constitute a violation of data protection obligations under the UK GDPR, which could lead to significant legal sanctions. Additionally, given that Stormous is known to be a politically motivated group, the incident could cause lasting damage to the organization's reputation and lead to disruptions in its operational processes.

Stormous, which has been active since 2021, is known for using data leaks as a leverage mechanism during negotiations. For organizations operating in the professional services and engineering sectors, such incidents highlight the importance of robust cybersecurity frameworks. Defensive measures typically include implementing strict access controls, maintaining offline backups, and conducting regular security audits to protect sensitive technical and client data from exfiltration.