Ransomware: Deadlock claims Elmoris (LT) — Not Found

On July 10, 2026, the ransomware group Deadlock published a claim on the ransomware.live leak site, alleging a breach against Elmoris, a Lithuanian entity. The listing is marked as "Not Found," which typically indicates that the victim’s data has been removed or the claim is unverified, but the publication itself signals a confirmed ransomware incident under the BREACH framework. This event updates the threat landscape for EU compliance teams, as it demonstrates ongoing ransomware activity targeting organizations in the Baltic region.

The primary affected organization is Elmoris, based in Lithuania. Given the lack of sector-specific details, compliance teams should assume this could impact any industry, but Lithuanian entities in critical infrastructure, manufacturing, or services are most at risk. The BREACH framework suggests this incident may trigger notification obligations under GDPR and national cybersecurity laws, particularly if personal data was exfiltrated.

Compliance teams should immediately verify whether their organization has any third-party or supply chain links to Elmoris. They must also review their incident response plans to ensure ransomware scenarios are covered, including data recovery, breach notification timelines, and communication with regulators. Additionally, teams should update threat intelligence feeds to monitor Deadlock’s tactics and reinforce employee training on phishing and ransomware prevention.