On July 28, 2026, Spanish biopharmaceutical company Diater (Laboratorio de Diagnóstico y Aplicaciones Terapéuticas, SA) was publicly listed on the leak site of the Deadlock Ransomware Group. The listing states that internal files were exfiltrated during a ransomware attack. The company, founded in 1999 and based in Madrid, develops allergy diagnostics and allergen immunotherapy products. The exact number of records affected and the specific types of internal files remain unknown, as the leak-site listing does not quantify them or provide samples.
Watch Diater
Get alerted the next time Diater files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Diater’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Listing
The primary disclosure on the Deadlock leak site states that Diater suffered a ransomware incident resulting in data exfiltration. It lists the Spanish laboratory as a victim and indicates that stolen internal files are held for extortion purposes. No ransom amount, exact breach date, or detailed inventory of the compromised data is published on the listing. The disclosure simply states that internal files were exfiltrated and gives the company until an unstated deadline to negotiate before further publication.
Why This Matters for You and Your Family
Even though Diater is a specialized medical company, patients, research participants, employees, and their families may have personal information inside the stolen internal files. Medical companies routinely store names, dates of birth, national identification numbers, contact details, clinical histories, allergy test results, and payment information. If any of these records belong to you or your family, the exposure creates long-term risk of identity theft, insurance fraud, and targeted scams that reference your real medical conditions. The fact that the volume of data is unknown makes it impossible to dismiss the incident as minor.
Doxxing and Identity-Chain Implications
Ransomware groups rarely limit themselves to one dataset. A single leaked email, phone number, or employee name from Diater can be combined with other breaches to build a complete identity profile. This chaining process often surfaces children’s information when parent and dependent records are linked. Gaming accounts, school emails, and family social-media handles frequently become exposed through these cascades, leading to doxxing, account takeovers, and harassment. Credential leaks like this one routinely spread across underground forums within weeks, giving criminals multiple avenues to reach your household.