Ransomware: Deadlock claims Zaffrani Srl (IT) — Business Services

On July 10, 2026, a ransomware incident involving the Italian business services firm Zaffrani Srl was published on the ransomware tracking platform ransomware.live. This event is classified under the BREACH framework, indicating a confirmed data compromise. The publication confirms that the Deadlock ransomware group has claimed responsibility for the attack, which likely involves data exfiltration and operational disruption. While no specific regulatory filing has been made public, the incident triggers notification obligations under the EU’s General Data Protection Regulation and the NIS2 Directive, given the potential impact on personal data and critical service continuity.

Organizations in the business services sector, particularly those operating in Italy or serving EU clients, are directly affected. This includes firms handling sensitive client data, payroll, or IT support. However, any EU-based company relying on third-party service providers should assess their supply chain risk, as ransomware attacks often propagate through vendor networks. Compliance teams in regulated industries such as finance, healthcare, and legal services should also review their exposure.

Compliance teams should immediately verify whether Zaffrani Srl is a vendor or data processor in their supply chain and assess any data breach notification timelines under GDPR. They should also update incident response plans to include ransomware-specific playbooks, ensure offline backups are tested, and review cyber insurance coverage. Proactive threat intelligence monitoring and employee phishing awareness training should be prioritized to mitigate similar risks. Finally, teams should document all steps taken for potential regulatory audits.