Ash & Lacy Holdings
bd_cf474a36d294deee · schema v1 · pii pii-v1
Full breach record for Ash & Lacy Holdings →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Payoutsking on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Ash & Lacy Holdings is a UK-based manufacturing company specialising in building envelope products and construction systems. It produces metal framing, rainscreen cladding, and roofing solutions primarily for the construction industry. Operating from the West Midlands, England, the company serves commercial and residential sectors, supplying architects, contractors, and specifiers with structural and aesthetic building components.
Source provenance
- Source URL
- https://www.ransomware.live/id/QXNoICYgTGFjeSBIb2xkaW5nc0BwYXlvdXRza2luZw==
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 14, 2026
- Raw hash
- ed3ddca3abd65272b1ffa64f5be74420ca6ec96e60d492afef54f05aa3e75566
Reporting entity
- Name
- payoutsking
Victim entity
- Name
- Ash & Lacy Holdingsnorm: ash lacy
- Domain
- ashandlacy.com
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· payoutsking
- Threat actor
- PayoutskingExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.