Eko-Flor Plus d.o.o. Listed by Deadlock Ransomware Group

On July 10, 2026, Croatian waste management company Eko-Flor Plus d.o.o. appeared on the leak site of the Deadlock ransomware group. The listing indicates that internal files were exfiltrated during a ransomware attack on the largest private waste handler in Croatia, which collects, sorts, and processes municipal and non-hazardous waste from its headquarters in Oroslavje.

What's Publicly Reported from Reporting

Public reporting on the Deadlock leak site, tracked by ransomware.live, shows the company was listed with a data sample and a demand for payment. Available reporting describes the exposed material as internal files; the exact volume and full list of records remain unconfirmed by the company. No official statement from Eko-Flor Plus had been published at the time of the listing. The incident follows the group’s typical pattern of posting proof of exfiltration after initial encryption attempts.

Why This Matters for You and Your Family

Even when a breach hits a business rather than a consumer app, the consequences reach ordinary households. Internal files from a waste management firm often contain names, addresses, phone numbers, contract details, and payment records of local residents and businesses. If your household uses municipal waste collection in the Oroslavje region or surrounding Croatian areas, your information may now sit in an attacker’s archive. Once stolen, these details rarely stay isolated. They feed into larger data sets sold on underground forums, increasing the chance of identity theft, phishing calls, or unwanted mail directed at you or your children.

The Doxxing and Identity-Chain Risks

A single company breach rarely stops at one dataset. Attackers combine the newly exposed addresses, emails, and phone numbers with information from previous leaks to build detailed profiles. This identity-chain process can link your work email to a personal gaming account, a child’s username, or a family member’s social-media handle. The result is doxxing: attackers or buyers can publish home addresses, map family relationships, and target you with harassment or scams. Credential leaks like this one frequently cascade into account takeovers on gaming platforms, where children’s accounts become entry points for further extortion.

Deadlock Ransomware Group Track Record

Public reporting attributes Deadlock with emerging in late 2023. The group has claimed responsibility for attacks on organizations across Europe and North America, including manufacturing firms, logistics providers, and local government contractors. Their publicly observed playbook begins with initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files before encryption. They then publish samples on their leak site and set payment deadlines, typically threatening full data release if demands are unmet. Exact success rates and prior victim counts are difficult to verify, but industry trackers list Deadlock among active ransomware operators using double-extortion tactics.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses, and online handles that may have been exposed in this incident.
• Rotate any password used at Eko-Flor Plus or related vendor portals anywhere it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same leaked address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing day-to-day accounts.

The speed with which ransomware groups publish stolen data leaves little room for delay. Taking concrete steps now can limit how far this claimed breach travels into your life. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control before the next link in the chain appears.