Noega and Esnova Listed by Deadlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On July 10, 2026, the ransomware group Deadlock listed Noega and Esnova on its leak site, stating that internal files had been taken during a ransomware operation. The number of individuals affected remains unknown, and no further details on the volume or contents of the material have been made public. The listing indicates that files were removed from the companies’ systems, yet the precise timing of the intrusion, the method used to gain access, and the scale of the data removal are not disclosed in available reports.

Inside the incident

The only confirmed information is the group’s public claim of having exfiltrated internal files. No independent confirmation of the breach has been issued by the companies, and no figures for records or files have been released. The date the data was taken and the duration of any unauthorized access remain undisclosed.

Inside Deadlock

Deadlock is a ransomware operation that maintains a leak site where it lists organizations it claims to have targeted. The group typically combines encryption of systems with the removal of data, then uses the threat of publication to pressure victims. Its listings are presented by the group itself and have not been verified by third parties in this case.

Who is Noega and Esnova?

Esnova Racks S.A., also referred to as Esnova, is a Spanish manufacturer based in Gijón, Asturias, that designs, produces, and installs industrial shelving and warehouse storage systems. It operates in more than 35 countries. Noega Systems, also headquartered in Gijón, was founded in 2010 and provides metal racking, storage solutions, technical inspections, and automated warehouse planning. Both firms work in the industrial logistics and intralogistics sector, where they handle project documentation, client specifications, and operational records.

What was likely exposed

The only data category named is “internal files exfiltrated in ransomware attack.” No further breakdown of file types or record counts has been provided. Companies in this sector commonly store engineering drawings, client contracts, supplier information, employee records, and project planning documents, but the exact contents of the material claimed by the group are unconfirmed.

Why it matters

Exposure of internal operational files can reveal details about manufacturing processes, client projects, and business relationships. For the companies, the incident may affect competitive information and contractual obligations. For individuals whose records appear in those files, the primary concern is the potential reuse of any personal identifiers that were stored alongside project or employment data.

If your data was in this claimed breach

Public detail on the specific records involved is limited. Individuals can take the following steps:

• Monitor accounts for unusual activity and enable multi-factor authentication where available.
• Review statements from banks or service providers that may have been referenced in company files.
• Run a free exposure scan of their email address against known breach datasets to check for prior appearances of their information.

No official notification process from the companies has been described in public reporting.

AICompiled with AI assistance from public sources and published under our editorial standards.