EDISA and INVERTIGE Listed by Deadlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On July 10, 2026, the ransomware group Deadlock listed Estudios de Investigación Servicio SL, known as EDISA, and the related entity INVERTIGE SL on its leak site. The listing states that internal files were exfiltrated during a ransomware incident. No confirmed count of affected individuals or specific file inventories has been released, leaving the full scope of the event undisclosed at this stage. The incident occurs against a backdrop of sustained ransomware activity in which groups continue to combine encryption with data theft and public claims of compromise. Such listings place additional pressure on affected organisations to respond while individuals connected to the companies face uncertainty about whether their information may have been exposed.

Inside the incident

The available information indicates that Deadlock claims to have carried out a ransomware operation against EDISA and INVERTIGE, resulting in the exfiltration of internal files. The listing appeared on July 10, 2026. No further details on the date of the intrusion, the volume of data taken, or the encryption status of systems have been made public.

Both the number of people whose information may be involved and the precise methods used remain undisclosed. The organisations have not issued statements confirming or disputing the claims.

The group behind it: Deadlock

Deadlock is a ransomware operation that maintains a leak site to publicise claimed victims. Groups of this type typically gain initial access through common vectors such as compromised credentials or unpatched systems, then move laterally before deploying encryption and exfiltrating data. Their listings serve as a form of pressure on targets that do not meet ransom demands.

The group’s claim regarding EDISA and INVERTIGE appears on its site; independent verification of the data’s authenticity or the extent of any encryption has not been reported.

About EDISA and INVERTIGE

EDISA, formally Estudios de Investigación Servicio SL, is a limited-liability company based in Valencia, Spain. Despite the research-oriented wording in its name, its activities centre on asset management, investment in other companies, and real-estate development. INVERTIGE SL, also headquartered in Valencia, provides central management functions and consultancy services focused on the administration and governance of other entities.

Companies engaged in investment, real-estate, and corporate governance routinely process financial records, contractual documents, and information relating to properties and business relationships. A compromise at organisations of this type can therefore affect both corporate operations and individuals connected to those assets.

What data was at risk

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of specific data categories has been published. Organisations handling asset management and corporate administration typically maintain records that include financial documentation, client or investor details, property information, and internal governance materials, yet the exact contents of the claimed exfiltration remain unconfirmed.

The real-world impact

Individuals whose information appears in the files may face risks of identity misuse or targeted fraud if the material is later distributed. For the companies, the incident can produce operational disruption, legal and regulatory scrutiny under Spanish and EU data-protection rules, and costs associated with investigation and remediation.

Because the number of affected people and the nature of the files are not yet known, the practical consequences cannot be quantified at present.

Were you affected?

Begin by monitoring official communications from EDISA and INVERTIGE. Change passwords for any accounts linked to the organisations and enable multi-factor authentication where available. Review bank and investment statements for unusual activity.

• Request a copy of your personal data from the companies under applicable data-protection law.
• Place fraud alerts with credit agencies if financial details may be involved.
• Run a free exposure scan of your email address against known breach datasets to check for prior appearances of your information.

AICompiled with AI assistance from public sources and published under our editorial standards.