Deadlock ransomware actors targeted H,İDROMEK, a leading Turkish heavy construction machinery manufacturer, stealing over 880 GB of sensitive internal data to pressure the organization. The claim implicates the threat actor Deadlock and impacts Turkey. #Turkey
Incident Details
- Victim: H,İDROMEK
- Sector: Manufacturing
- Country: TR
- Actor: Deadlock
- Source: http://deadblogdbdu5wprek7wa2o4ce7rnt6u6ntqeud3hzjjcveosgpsqqqd.onion/s3.php?d=d2FzYWJpOmRhdGEtaGlkcm9tZWsuY29tLnRyfGV1LWNlbnRyYWwtMXw5VEJFNVcyWEZUNDlJUENLR1c1RXxOYUpkS0hRQ3U1SXdCT2FFcFRNc0QxRlJodGpST0hCNVhVdFdQd01s
- Discovered: 2026-07-25T17:56:19.682846+00:00
- Published: 2026-06-30T00:00:00+00:00
Information
- Leading Turkish manufacturer of heavy construction machinery, recognized globally for its high-performance, award-winning equipment.
- Founded in Ankara in 1978 by mechanical engineer Hasan Basri Bozkurt.
- Operates six state-of-the-art production facilities across Turkey and Thailand.
- Its machinery is used in more than 130 countries across six continents.
- More than 880 gigabytes of sensitive internal data were stolen.
Disclaimer: This post is based on public claims made by the ransomware group "Deadlock". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.