Daldoss Elevetronic Listed by 8base Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Daldoss Elevetronic, an Italian manufacturer of elevators, hoists and lifting platforms, was listed by the 8base ransomware group on or around 23 September 2024. Public reporting indicates that internal files were exfiltrated during a ransomware attack; the number of people affected and the precise contents of those files remain undisclosed.

The listing itself is a claim by the group rather than an independently verified confirmation of every detail. For customers, partners and employees of a long-established industrial firm, the incident raises practical questions about what data may have left the company’s systems and what steps those potentially affected can take.

What happened

According to the available record, Daldoss Elevetronic appeared on the leak site associated with the 8base ransomware group, with the listing dated 23 September 2024. The report states that internal files were exfiltrated in a ransomware attack. No further public detail has been released on the date the intrusion began, the method of initial access, the volume of data taken, or whether encryption of systems also occurred. The number of individuals whose information may be involved is unknown. Because the facts consist of a group listing and a brief description of exfiltrated internal files, any additional claims about scale or impact remain unconfirmed.

Who is 8base?

8base is a ransomware operation that has been active in the public threat landscape for several years. Like many contemporary groups, it typically follows a double-extortion model: data is stolen before systems are encrypted, and the group threatens to publish the material on a dedicated leak site if a ransom is not paid. Listings on such sites are the group’s own assertions; they do not automatically constitute independent proof of every claimed detail. 8base has previously targeted organisations across manufacturing, professional services and other sectors, often publishing sample files or full archives once a deadline passes. Public analysis of the group’s activity has noted the use of common ransomware tooling and affiliate-style operations, but no specific technical claims about the Daldoss incident beyond the listing itself are established in the available facts.

About Daldoss Elevetronic

Daldoss Elevetronic is described as a family company with more than seventy years of experience in the elevation industry. It designs and manufactures elevators, hoists and lifting platforms intended for both industrial and private environments. Its public presence is centred on daldoss.com. Firms of this type typically maintain engineering drawings, supplier and customer records, employee information, commercial contracts and operational documentation. A ransomware incident affecting such an organisation can therefore touch both the company’s own operations and the personal or commercial data of people who deal with it. The breach is consequential because industrial manufacturers often hold long-term relationships with clients and partners whose contact details, project data or contractual information may reside in internal systems.

The information in question

The only data type named in the public record is “internal files” said to have been exfiltrated. No inventory of those files, no count of records, and no confirmation of specific categories such as personal identifiers, financial details or technical drawings have been released. Organisations in the elevator and lifting-equipment sector commonly hold employee records, customer and supplier contact information, design documentation, maintenance histories and commercial correspondence. Whether any of those categories were among the files taken in this case is unconfirmed. Readers should treat the precise contents as unknown until the company or independent investigators provide further verified information.

What's at stake

For individuals whose details may appear in internal files, the practical risks include unsolicited contact, phishing attempts that reference genuine company relationships, or misuse of any personal data that happened to be stored. For the organisation itself, the stakes include potential disruption to operations, the cost of investigation and remediation, and the need to notify partners or regulators if personal data is later confirmed to have been involved. Because the number of people affected is unknown and the exact data types remain undisclosed, the scale of these risks cannot yet be quantified. The listing by 8base also creates reputational pressure, as the group’s public claim can circulate even while the full facts are still being established.

What to do if you're exposed

If you have a past or present relationship with Daldoss Elevetronic—as an employee, customer, supplier or partner—monitor accounts and communications for unusual activity. Change passwords on any related systems if you have not already done so, enable multi-factor authentication where available, and treat unexpected messages that reference the company with caution. Keep records of any suspicious contact. Because the full scope of the data remains unconfirmed, a free exposure scan of your email address against known breach datasets can help you check whether your information has already appeared in publicly indexed leaks; such a check is a practical first step while further details about this incident, if any, become available.

AICompiled with AI assistance from public sources and published under our editorial standards.