Skip to content
Ransomware

ThreeAM ransomware group lists guardianbarrierservices.com on its leak site

The ThreeAM ransomware group has listed the event equipment provider guardianbarrierservices.com on their leak site.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: ThreeAM
  • Country: United Kingdom
  • Sector: Professional Services
  • Announcement date: June 29, 2026

The ThreeAM ransomware group has officially listed the event equipment provider guardianbarrierservices.com on its dedicated leak site. This announcement, made on June 29, 2026, marks a potential data breach for the United Kingdom-based organization, as the threat actor claims the company's data may have been compromised during the attack.

The details of the claim

The threat actor known as ThreeAM posted the listing for guardianbarrierservices.com on June 29, 2026. While the group has claimed responsibility for the incident, the specific details surrounding the attack remain limited. The announcement provided by the group includes general information regarding the company's business operations, specifically focusing on its event management and equipment rental services. This type of listing is a common tactic used by ransomware groups to pressure organizations into meeting ransom demands through the threat of public data exposure.

Ransomware leak sites serve as a platform for cybercriminals to host information stolen from victims. In many modern cyberattacks, groups employ a strategy known as double extortion. In this scenario, attackers do not just encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this data on a public site adds a layer of pressure, as the victim faces not only operational downtime but also significant reputational damage and legal consequences if the information is released.

Status of the compromised data

At this time, there is no information available regarding the specific nature or the content of the allegedly compromised data. The listing does not specify the volume of files involved or the exact types of information that may have been accessed by the attackers. Furthermore, the screenshot associated with the claim indicates that the files have not yet been published by the ThreeAM group.

The listing names no specific data types that have been compromised.

About guardian barriers services

Guardian Barrier Services is a company based in the United Kingdom that operates within the professional services sector. The organization provides a wide range of products and services designed for events, including crowd control barriers, cable ramps, truss structures, and temporary flooring. They support their clients throughout the entire event management process, offering assistance from the initial planning stage through to the final execution of the event.

Potential impact and organizational risks

This incident may create negative impacts on the company's operational continuity. Because the organization is based in the United Kingdom, any potential data breaches may bring legal obligations under the UK GDPR. Organizations facing such threats must navigate complex regulatory requirements regarding data protection and mandatory breach notifications.

Beyond immediate operational and legal concerns, secondary risks may include the potential use of leaked data for identity theft or targeted phishing attacks against the company or its stakeholders. For organizations in the professional services and event management sectors, the risks to clients and employees may vary significantly depending on the actual nature of the data that might have been compromised.

To defend against such threats, organizations typically implement a multi-layered security approach. This includes maintaining robust backup solutions that are isolated from the main network, implementing strict access controls, and conducting regular security awareness training for employees to recognize phishing attempts. Continuous monitoring of network traffic and the implementation of endpoint detection and response tools are also common defensive steps used to mitigate the risk of ransomware deployment and data exfiltration.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories