Ransomware: Deadlock claims ONE Contact (SE) — Business Services

AI Analysis

On 10 July 2026, a ransomware group known as Deadlock published a data breach claim on the ransomware.live leak site, targeting ONE Contact (SE), a business services firm. This publication indicates that the threat actor has exfiltrated data from the victim’s systems and is now threatening to release it unless a ransom is paid. The claim falls under the BREACH framework, which typically signals confirmed data exposure with potential regulatory notification obligations.

The affected organization is ONE Contact (SE), a Swedish business services provider. However, because business services firms often handle client data, the breach may indirectly impact their customers across multiple sectors, including finance, healthcare, and public administration. Any organization that shared personal or sensitive data with ONE Contact should consider themselves potentially affected.

Compliance teams should immediately verify whether their organization has any data processing relationship with ONE Contact (SE). If so, they must assess whether any personal data of EU residents has been compromised and determine if a breach notification to the relevant supervisory authority is required under GDPR within 72 hours. Teams should also review their incident response plans, engage legal counsel, and prepare for potential customer notifications and regulatory inquiries.