Gerusia S.L. Listed by Deadlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Inside the incident

The only confirmed detail is the appearance of Gerusia S.L. on the Deadlock site. The entry asserts that files were removed from the organisation’s systems. No information has been published about the date of the intrusion, the method of initial access, the volume of data taken, or whether any material has been released publicly. The scale of the event and the precise contents of the files remain undisclosed.

Inside Deadlock

Deadlock is a ransomware operation that follows the now-common pattern of encrypting victim systems and then threatening to publish stolen data if a ransom is not paid. The group maintains a site where it lists organisations it claims to have compromised. Such listings are presented by the actors themselves and are not independently verified at the time they appear. Deadlock has previously targeted entities in Europe and elsewhere, though its activity profile is still developing compared with longer-established groups.

Who is Gerusia S.L.?

Gerusia S.L. was founded in 1995 and is based in Oviedo. It is managed by women and supplies cleaning, auxiliary, and social-sanitary services to public-sector and private clients across Asturias. Companies of this type routinely maintain records on employees, service contracts, client facilities, and administrative correspondence. A disruption or data incident at such an organisation can affect both its workforce and the public bodies it serves.

What was likely exposed

The listing refers only to “internal files.” No inventory of specific data categories has been released. Organisations in the cleaning and social-services sector commonly hold employee records, payroll information, client contact details, and operational schedules. Whether any of these categories are present in the exfiltrated material has not been confirmed.

What's at stake

If personal data such as names, addresses, or employment records are among the files, affected individuals could face risks of identity misuse or targeted fraud. For the company, the incident may complicate contract renewals and regulatory compliance obligations under Spanish and European data-protection rules. The absence of a confirmed data count makes it difficult to assess the full scope of potential harm at this stage.

If your data was in this claimed breach

Individuals who have worked with or for Gerusia S.L. should monitor their financial and official accounts for unusual activity. Enabling multi-factor authentication on important services and using a password manager reduce the chance that any exposed credentials can be reused elsewhere. A free exposure scan of an email address against known breach data sets can indicate whether the address has appeared in previously published incidents; such scans do not cover every unreported event.

AICompiled with AI assistance from public sources and published under our editorial standards.