DeadLock ransomware hits biopharma Diater, leaks patient data

Diater, a biopharmaceutical company based in Madrid, has been targeted by the ransomware group DeadLock, which has released information on the dark web. The company, managing sensitive patient and healthcare professional data, has had user directories, documents, and QM files compromised, although specifics on the ransom, incident date, and full extent of data extracted remain undisclosed.

DeadLock, identified in mid-2025 and linked to Russian origins, employs a double extortion tactic, both encrypting and exfiltrating data. Systems affected by the attacks are marked with a .dlock file extension.