Elmoris Listed by Deadlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Elmoris was listed by the Deadlock ransomware group on July 10, 2026, after internal files were exfiltrated in an attack. Check whether your information was exposed and take protective steps if needed.
What happened
The incident came to public attention when Deadlock added Elmoris to its leak site on July 10, 2026. The group claims to have obtained internal files through a ransomware operation. No further details on the timing of the intrusion, the volume of data, or the specific methods used have been disclosed by either the company or the group.
Inside Deadlock
Deadlock is a ransomware operation that follows the common pattern of encrypting systems and removing copies of data before demanding payment. Groups of this type typically maintain leak sites where they list victims and release samples or full archives when negotiations fail. Public records of Deadlock’s activity show repeated use of this approach against organisations in manufacturing and other sectors, though each listing remains an unverified claim until independently confirmed.
Who is Elmoris?
UAB Elmoris was established in 1996 in Vilnius, Lithuania. It produces light metal packaging and twist-off lug caps, with an emphasis on PVC-free, environmentally oriented products. The company also offers metal printing services and holds Authorised Economic Operator certification, which facilitates its participation in international trade. Organisations of this type routinely manage production records, supplier contracts, and regulatory documentation tied to food-contact materials.
What data was at risk
The only information released so far is that internal files were allegedly exfiltrated. The precise categories of data contained in those files have not been published. Manufacturing companies in this sector commonly store technical specifications, quality-control records, customer and supplier correspondence, and financial documentation; however, the exact contents of the material claimed by Deadlock are unconfirmed.
The real-world impact
Exposure of internal manufacturing and commercial files can create competitive or regulatory concerns for the affected company and its trading partners. For individuals whose information appears in such records, the primary risks involve potential misuse of contact details or business-related identifiers. At present there is no public indication of the scale or sensitivity of any personal data involved.
Were you affected?
Individuals who have had business dealings with Elmoris should monitor their email accounts and any associated services for unusual activity. Checking whether an email address appears in known breach datasets provides one practical starting point; several free online tools allow users to run such a scan without submitting additional personal information.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
UFL Listed by Deadlock Ransomware GroupAksv Listed by Deadlock Ransomware GroupGerusia S.L. Listed by Deadlock Ransomware GroupLivisto Listed by Deadlock Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Elmoris Listed by Deadlock Ransomware Group →
Publicly posted by deadlock — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.