Ransomware group AuditTeam hits ADL Lift Services Limited
ADL Lift Services Limited — a manufacturing target operating in GB has been listed by the AuditTeam ransomware group on 2026-10-13. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | ADL Lift Services Limited |
|---|---|
| Threat Group | AuditTeam |
| Summary | ADL Lift Services Limited, a manufacturing organization in the United Kingdom, was listed by the AuditTeam ransomware group on its leak site on 2026-10-23. |
| Date of Breach | 2026-10-13 |
| Discovery Date | 2026-10-23 |
| Region | GB |
| Target Domain | — |
| Business Sector | Manufacturing |
| Severity | MEDIUM |
Claim by AuditTeam
ADL Lift Services Limited is a Scotland-based commercial lift specialist, incorporated in 2010 and now headquartered in Bellshill at Strathclyde Business Park, that under the leadership of Brian Harkin employs around 40 people with assets and shareholders’ funds in the low-millions-of-pounds range, focuses on Glasgow and other major Scottish cities while offering UK-wide 24-hour emergency call-out, and provides full-lifecycle passenger, goods, service, accessibility and bespoke lift design and installation, maintenance, repairs and modernisation for commercial properties, local authorities, health boards and housing associations, holding credentials such as LEIA membership, ISO 9001/45001 and Safecontractor, primarily through adlliftservices.com (with adlliftservices.co.uk redirecting there).
Posted by the AuditTeam threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Leak post (onion / Tor)
http://6tdqqaxftvradka5d2frzgwixis7fmro7rfh4ettzcx7jfapkebe6jad.onion/entity/9ACBED3DF66E8E73
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.