Grupo Mercurio

Grupo Mercurio was compromised in a ransomware attack attributed to deadlock in June 2026. The organization, operating in the Business Services sector in Mexico, was added to the group's data leak site as part of an extortion campaign.

deadlock operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Grupo Mercurio is a leading Mexican business conglomerate primarily recognized for its dominance in the bicycle and sports industry. Based in San Luis Potosí, the group operates one of the largest bicycle manufacturing plants in Mexico. https://www.grupomercurio.mx/