CAD93 Listed by Deadlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

What happened

The reported incident centers on a ransomware attack against CAD93 in which internal files were removed from the organization’s systems. The breach was brought to public attention solely through the group’s leak-site listing on the date noted above. No information has been provided on when the intrusion began, how long data remained outside the company’s control, or the scale of the exfiltration.

Inside Deadlock

Deadlock is a ransomware operation that maintains a public leak site to list organizations it claims to have targeted. Groups of this type commonly combine data theft with encryption to create leverage for ransom demands. The listing of CAD93 constitutes the group’s assertion that it obtained material from the firm; independent confirmation of the claim or of any subsequent actions has not been made public.

CAD93 and its sector

C.A.D. 93 S.r.l. operates as an authorized customs broker in Italy, providing services that include import and export documentation, regulatory compliance, and international-trade consulting. Firms in this sector routinely process shipment records, declarations, and supporting commercial documents on behalf of clients. A compromise at such an organization can therefore touch both the broker’s own operational records and information belonging to the companies it serves.

The information in question

The only data category named in connection with the incident is “internal files exfiltrated in ransomware attack.” The precise contents of those files have not been described. Customs-brokerage records typically include trade documentation, client identifiers, shipment details, and compliance materials, yet it is not confirmed whether any of these categories were among the files removed.

The real-world impact

Exposure of internal files from a customs broker can create downstream risks for the organization’s clients, including potential misuse of commercial or personal data contained in trade records. For CAD93 itself, the incident may prompt regulatory scrutiny under Italian and European data-protection rules. At present, the absence of confirmed data volumes or specific record types leaves the scope of any individual harm unquantified.

What to do if you're exposed

Individuals who believe their information may have been involved should monitor bank and government-service accounts for unusual activity and consider placing fraud alerts where available. Organizations can review access logs and consult legal counsel regarding notification obligations. Readers may also run a free exposure scan of their email address against known breach data to check for prior appearances in public records.

AICompiled with AI assistance from public sources and published under our editorial standards.