81 Victims for Agriculture and Food Production in 2025


Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


 Manufacturing|  Construction |  Transportation/Logistics |  Technology |  Healthcare |  Financial Services |  Public Sector |  Business Services |  Retail |  Consumer Services |  Energy |  Telecommunication |  Agriculture and Food Production |  Hospitality and Tourism


This page lists all the victims of ransomware attacks in Ransomware.live database for Agriculture and Food Production in 2025. We continously scrape ransomware group site to detect new victims.
Ransomware.live uses AI to identify the activity of victims, but please note that the results may not be 100% accurate—do not hesitate to contact us if you notice any errors.
RO flag

AAYLEX ONE S.A. 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 15:18

At Cocorico, we aim to raise the most natural, healthiest and bes t tasting chicken. We are ready to upload more than 19 GB of essential corporate doc uments such as: corporate licenses, agreements and contracts (inc luding corporate NDA’s), contact numbers and e-mail addresses of employees and customers, employees medical documents, etc.

Group: 
US flag

Primex Farms LLC 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 13:48

Primex Farms is a manufacturer of nuts and dried fruits. We are ready to upload more than 25 GB of essential corporate doc uments such as: corporate NDA’s, personal driver license scans, p assports and other employee and customer documents, financial dat a (audits, payment details, reports), corporate licenses, agreeme nts and contracts, etc.

Group: 
US flag

SEAQUEST SEAFOOD 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:22
Estimated Attack Date: 2025-03-21

Seaquest Seafood specializes in processing, imports, and wholesale distribution of seafood. Our team was successful in extracting the following documents: Financial statements of the company Contact information of clients and employees Partnership agreements, licenses and contracts Corporate inspection results The icing on the cake: Employee and clients social security numbers Driving licenses Human Resources documents

Victim:   |  Group: 
US flag

fplfood.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-21 15:21
Estimated Attack Date: 2024-12-16

11.02.2025 UPDATE! 100% Disclosed 21GB >> Download link #2 Food & Beverage. “FPL Food, LLC is the largest privately held vertically integrated beef processor in the Southeastern United States and is one of the largest privately held processors of fresh beef products and value added meat selections in the United States. The Company has four facilities, and serves several brands reaching retail and foodservice customers. The Company delivers beef products locally and exports worldwide.” Website: https://fplfood.com/ Revenue : $675M Address: 1301 New Savannah Rd, Augusta, Georgia, 30901, United States Phone Number: (706) 722-2694 Download link #1: https://[redacted].onion/FPLFOOD/PROOF/ Mirror: https://[redacted].onion/FPLFOOD/PROOF/ Download link #2: https://[redacted].onion/FPLFOOD/full/ Mirror: https://[redacted].onion/FPLFOOD/full/ DATA DESCRIPTIONS: Personal Identifiable Information, corporate data: invoices, shipping scans, employee personal docs, QA data, corporate correspondence, etc.

fplfood.com has been previously claimed by Play for an attack estimated on 2024-05-30.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-03-21

Victim:   |  Group: 
PE flag

Machu Picchu Foods 

Company logo
Ransomware Group:

Discovery Date: 2025-03-19 13:48

Machu Picchu Foods provides services as a cacao ingredient and ch ocolate supplier, as well as a contract manufacturer for private labels. We are ready to upload some essential corporate documents such as : financial data (audits, payment details, reports), contact numb ers and e-mail addresses of employees and customers, corporate li censes, agreements and contracts, etc.

Group: 
DE flag

gaertnerhof-jeutter.de 

Company logo
Ransomware Group:

Discovery Date: 2025-03-18 12:31

In 1907, Carl Christoph Jeutter founded his horticultural business. They laid the foundation for a centuries-long family tradition in horticulture. Their love of plants and green landscapes continues to this day, now in its fifth generation. Revenue $5 Million [redacted]

Victim:   |  Group: 
US flag

Harrells.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-14 07:46
Estimated Attack Date: 2025-03-13

Based in Lakeland, Florida since 1941, Harrells is a leading producer and distributor of customized, agronomic solutions not merely products. This includes nutritional solutions in both granular and liquid form to help your turf, landscape and plants grow and thrive. We also specialize in delivering solutions to help protect your world from pests, environmental threats and climate extremes. Naturally, we have production and storage facilities throughout the country to ensure timely, efficient shipments.

Victim:   |  Group: 
ES flag

Arcusin 

Company logo
Ransomware Group:

Discovery Date: 2025-03-10 14:47

Arcusin develop and manufacture specialized bale handling equipme nt to increase efficiency and cost savings for farmers around the world. We are ready to upload more than 55 GB of essential corporate doc uments such as: corporate NDA’s, confidential licenses, agreement s and contracts, internal correspondence, passports and other emp loyee and customer documents, etc.

Group: 
GB flag

Cotswold Fayre 

Company logo
Ransomware Group:

Discovery Date: 2025-03-09 20:28
Estimated Attack Date: 2025-03-05

Cotswold Fayre was started by Paul Hargreaves in the Early Nineties originally as the wholesale distribution arm of a number of small Cotswold based companies. With the tremendous growth of interest in high quality products that are not available in the multiples during this time, Cotswold Fayre has grown and developed considerably. Cotswold Fayre now supply over 700 customers now and has over 80 suppliers. These suppliers are all speciality producers mainly from the UK, but now some are from as far away as New Zealand and South Africa. NOTE: To view our product range and make an order you need to become a registered customer

Victim:   |  Group: 
NO flag

lofotenseafood.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-07 18:53

Lofoten Seafood was established in 1980 by Britt and Roger Mosseng, who started with farming of Atlantic salmon (Salmo salar). Some years later the production of dried and salted fish resumed, which originally had its beginnings in the 1930s. The company has placed emphasis on local control and ownership. Good workers have helped build the company to what it is today. Lofoten Seafood has its own Smolt production - farming of fish - production of fish - processing, as well as its own sales department and export activity. Everything maintained and controlled by the same company. Knowledge and experience are exchanged at every level in the company as we as daily rutines of control of every department. Traceability is very important for the company which helps us trace any matter regarding the fish from its a fish egg to it reach the markets around the world.

Victim:   |  Group: 
 flag

wheats.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-07 11:40

Victim:   |  Group: 
DE flag

willms-fleisch.de 

Company logo
Ransomware Group:

Discovery Date: 2025-03-05 20:09

[AI generated] Willms-Fleisch GmbH is a Germany-based company known for providing high quality meat products. The company specializes in the import and export, processing, and sales of high-quality pork, beef, and other meat products. Their expertise includes individual cuts for various culinary requirements, and special meat products for industrial users. They boast more than 50 years in the industry, signaling a strong reputation for both domestic and international customers.

Victim:   |  Group: 
US flag

www.sunsweet.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-05 11:35
Estimated Attack Date: 2025-03-04

[AI generated] Sunsweet is a renowned global brand specializing in dried fruits, especially prunes. Based in the USA, Sunsweet Growers Inc. is an agricultural cooperative with over 200 grower members. Their products range from pitted prunes, mixed fruit, dates, cherry-essence prunes to specialty products such as prune juice. Sunsweet emphasizes nurturizing health and aims to harness nature's goodness into delicious, nutrient-rich foods.

Victim:   |  Group: 
US flag

usarice.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-03 21:28

usa - USA Rice

Victim:   |  Group: 
CA flag

Ganong Bros 

Company logo
Ransomware Group:

Discovery Date: 2025-03-02 19:59

Canada

Victim:   |  Group: 
US flag

HOLLANDIADAIRY.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 18:11

[AI generated] Hollandia Dairy is a family-owned and operated dairy company located in San Diego, California. Established in 1950, it provides a range of fresh dairy produce to its local community. Their product line includes milk, cheese, yoghurt, sour cream, eggs, juices, and more. The company prides itself on its dedication to sustainable farming practices, ensuring the welfare of their animals and the quality of their products.

Victim:   |  Group: 
US flag

GOURMETTRADING.NET 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 18:05

[AI generated] Gourmet Trading Company, based in California, is a global supplier and distributor of fresh produce. Established in 1982, it specializes in supplying asparagus and blueberries, among other fruits and vegetables. Their network spans across North and South America, Australia, and New Zealand, serving retailers, wholesalers, and foodservice distributors. Apart from offering top-quality products, Gourmet Trading Company also values sustainability and social responsibilities.

Victim:   |  Group: 
US flag

FOODIMPORTGROUP.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 17:59

[AI generated] FOODIMPORTGROUP.COM is a company specialized in importing and distributing international foods. Their portfolio includes a vast selection of products from around the world, offering customers unique foods and flavors not commonly found in local U.S. markets. The firm also prides itself on providing quality products at competitive prices, ensuring that businesses can expand their offerings to include international cuisine.

Victim:   |  Group: 
US flag

ESBERBEVERAGE.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 17:52

[AI generated] ESBER BEVERAGE COMPANY is a family-run business that has specialized in beverage distribution since 1933. They are based in Ohio, USA. Their product range includes fine wines, craft beers, and specialty spirits. The company is famous for its wide selection of products and excellent service. They cater to both retail and wholesale customers while also offering valued insights about the beverage industry.

Victim:   |  Group: 
 flag

WKKELLOGG.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 17:50

[AI generated] WKKELLOGG.COM appears to be a domain name that may not be directly related to the original Kellogg Corporation. It is advisable to tread with caution when associating a domain with an established brand. The original Kellogg, founded by W.K. Kellogg, is a multinational food manufacturing company known for cereal and convenience foods, including cookies, crackers, and toaster pastries.

Victim:   |  Group: 
US flag

UPPERLAKESFOODS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 17:41

[AI generated] Upper Lakes Foods is a family-owned food distributor based in Minnesota, USA. They have over five decades of experience in the industry and specialize in distributing food to healthcare organizations, schools, retailers, and restaurants. The company ensures the highest quality of food products and services, contributing to their client’s success by offering innovative solutions, personalized service, and a comprehensive food selection.

Victim:   |  Group: 
CA flag

SEA-DELIGHT.CA 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 17:27

[AI generated] SEA-DELIGHT.CA is a Canadian seafood distributor. They are committed to providing high-quality, sustainable seafood to suppliers for domestic and international markets. This includes a wide range of seafood varieties like lobster, crab, shrimp, scallops, and more. Additionally, they actively participate in global efforts for seafood sustainability and ensure their products adhere to environmental standards.

Victim:   |  Group: 
CA flag

SUN-RICH.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 17:27

[AI generated] Sun-Rich.com is a North American company, specifically known for processing and packaging fresh-cut fruit for retail and foodservice customers. Evolved with over 30 years, it is committed to maintaining freshness and flavor of products ensuring harsh chemical preservatives are avoided. Its product range includes apples, melons, berries, and fruit mixes across the US and Canada.

Victim:   |  Group: 
US flag

REDCLAYGOURMET.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 17:15

[AI generated] RedClayGourmet.com is a food producer renowned for their gourmet, craft-cooked pimento cheese spreads. The company prioritizes using natural, high quality ingredients sourced mainly from North Carolina, USA. Their range of flavors includes Classic Sharp Cheddar, Flame-Roasted Jalapeno, Hickory Smoked Cheddar, and Goat Cheese & Sun-Dried Tomato. They are committed to continuous innovation and superior taste.

Victim:   |  Group: 
US flag

REMAFOODS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 17:14

[AI generated] REMAFOODS.COM is a food distribution company that specializes in the procurement and supply of premium quality food and beverage products. They source their products from a range of international and local suppliers to provide a wide assortment of offerings to their clients which may include restaurants, hotels, caterers and other food service businesses.

Victim:   |  Group: 
 flag

PANEUROFOODS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 17:02

[AI generated] PANEUROFOODS.COM is a business enterprise based in Poland that specializes in the distribution and sales of food products across Europe. Their trade includes a wide range of items, including meat, dairy products, vegetables, fruits, and other packaged goods. Their core values prioritize providing quality goods, maintaining competitive prices, and ensuring quick and efficient delivery to partners and businesses.

Victim:   |  Group: 
US flag

OREGONFRUIT.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 16:59

[AI generated] Oregonfruit.com is a business owned by Oregon Fruit Products LLC. Founded in 1935, the Oregon based company specializes in canned, frozen and shelf-stable fruit products. They provide a wide variety of premium fruits in their natural juices, wine and syrups which are commercially used in brewing, baking and cooking. Known for its quality and flavor, Oregon Fruit Products is committed to sustainability and supporting local growers.

Victim:   |  Group: 
US flag

NATURESWEET.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 16:53

[AI generated] NatureSweet is a leading fresh produce brand specializing in high-quality, sweet-tasting tomatoes. Pioneering the market with innovative, technologically advanced agriculture practices, they provide a year-round supply of tomatoes. These include ranges like Cherubs, SunBursts, Glorys, and Constellation. NatureSweet greatly emphasizes sustainable farming methods and fair-trade principles, supporting local communities to cultivate a healthier world.

Victim:   |  Group: 
US flag

MAPLELEAFFARMS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 16:52

[AI generated] Maple Leaf Farms, Inc. is a leading poultry farming company based in Indiana, USA. It is renowned for specializing in the production of duck meat and other duck-related products. Since its establishment in 1958, it prides itself for its high quality and sustainable farming practices which promotes animal welfare. Beyond meat production, the company also offers resources such as cooking tips and recipes.

Victim:   |  Group: 
US flag

alphabaking.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-26 15:54
Estimated Attack Date: 2025-02-06

Alpha Baking Company, founded in 1979 and headquartered in Chicago, Illinois, manufactures fresh or frozen bread and bread-type rolls, cakes, pies, and other perishable bakery products. Website: https://www.alphabaking.com/ Revenue : $421.9M Address: 5001 W Polk St, Chicago, Illinois, 60644, United States Phone Number: (773) 261-6000 Download link #1 : https://[redacted].onion/ALPHABAKING/PROOF/ Mirror: https://[redacted].onion/ALPHABAKING/PROOF/ DATA DESCRIPTIONS: Personal identifiable information, database backups, corporate confidential data, agreements\contracts\NDAs, HR dept docs, employees personal data, financial docs\payroll, production data, corporate correspondence, etc.

Victim:   |  Group: 
PE flag

Chimu Agropecuaria S.A. 

Company logo
Ransomware Group:

Discovery Date: 2025-02-26 15:47

Chimú Agropecuaria, leader in the production and commercializatio n of poultry, contributes to the well-being of humanity, supplyin g food for mass consumption in the global market. We are ready to upload more than 14 GB of essential corporate doc uments such as: financial data (audits, payment details, reports) , contact numbers and e-mail addresses of employees and customers , etc.

Group: 
JP flag

Nichino Ryokka Co Ltd 

Company logo
Ransomware Group:

Discovery Date: 2025-02-25 08:27

Exfiltraded data : yes - Encrypted data : yes

Victim:   |  Group: 
US flag

amalgamatedsugar.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-24 14:03
Estimated Attack Date: 2025-02-06

Founded in 1902, The Amalgamated Sugar Company produces sugar from sugar beets grown by members of our parent cooperative, Snake River Sugar Company. Website: https://www.amalgamatedsugar.com/ Revenue : $764.8 M Address: 1951 S Saturn Way Ste 100, Boise, Idaho, 83709, United States Phone Number: (208) 383-6500 Download link #1: https://[redacted].onion/AMALGAMATEDSUGAR/PROOF/ Mirror: https://[redacted].onion/AMALGAMATEDSUGAR/PROOF/ DATA DESCRIPTIONS: Personal identifiable information, database backups (customer data, shipping, production, etc.), corporate confidential docs, agreements\cotracts\NDAs, financial\payroll data, HR dept docs, confidential engineering docs and drawings, customer information, employees\executives private data, corporate correspondence, etc.

Victim:   |  Group: 
US flag

evergreenpnw.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-22 09:50
Estimated Attack Date: 2025-01-22

Evergreen Christian Community is a company that operates in the Religious Organizations industry. It employs 100to249 people and has 10Mto25M of revenue. The company is headquartered in Olympia, Washington. Phone Number (360) 352-3410 IT Director (360) 528-7385 Total Files Listed: 63846 File(s) 32,565,343,182 bytes 16440 Dir(s) 7,329,921,945,600 bytes free

Victim:   |  Group: 
US flag

newhorizonsbaking.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-20 19:26
Estimated Attack Date: 2025-01-21

Food & Beverage “New Horizons Baking produces hamburger buns and english muffins for Iconic Brands. Our customer base is broad and our commitment is to produce gold standard quality bakery products that our customers love, and our employees are proud of making.” Website: https://newhorizonsbaking.com/ Revenue : $163M Address: 211 Woodlawn Ave, Norwalk, Ohio, 44857, United States Phone Number: (419) 663-6432 Download link #1: https://[redacted].onion/NHBCO/PROOF/ Mirror: https://[redacted].onion/NHBCO/PROOF/ DATA DESCRIPTIONS: Personal Identifiable information, database backups, corporate confidential docs, contracts, agreements, HR dept data, QA\engineering docs, financial data, payroll, employees\executives personal folders, corporate correspondence, etc.

Victim:   |  Group: 
US flag

Nebraska Irrigation 

Company logo
Ransomware Group:

Discovery Date: 2025-02-20 16:17

Supplier and manufacturer of center pivot components to dealers d omestically and internationally. We are ready to upload a lot of essential corporative documents s uch as: NDA’s, driver licenses, financial data (audits, payment details, reports), contact number s and e-mail addresses of employees and customers, etc.

Group: 
US flag

californiaclingpeaches.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-20 13:27
Estimated Attack Date: 2025-01-10

California Cling Peaches growers offer nutritious peaches packed in Cans, Jars, and Single Serve cups, available year-round. Through the U.S. Department of Agriculture's program, they promote their peaches in international markets, focusing on Canada and Mexico. Discover the blend of tradition and innovation in delivering high-quality peaches. Their efforts ensure a continuous source of exquisite flavor and nutritional goodness is available to food and nutrition professionals, as well as families seeking quick and easy recipes. Total Files Listed: 26793 File(s) 37,983,823,444 bytes 17315 Dir(s) 2,112,818,327,552 bytes free

Victim:   |  Group: 
US flag

Bushmans 

Company logo
Ransomware Group:

Discovery Date: 2025-02-17 21:44

United States

Victim:   |  Group: 
US flag

ssmcoop.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-17 17:04
Estimated Attack Date: 2025-02-05

Business Services. “All West Select Sires Inc. provides bovine genetics and related services. The company offers services such as select mating services, estrus synchronization, artificial insemination school, breeding box plans, technicians, and programs for genetic advancement.” Website: https://ssmcoop.com/ Revenue : $22.5M Address: PO Box 1803, Turlock, California, 95381, United States Phone Number: (800) 278-8254 Download link #1: https://[redacted].onion/ALLWEST/PROOF/ Mirror: https://[redacted].onion/ALLWEST/PROOF/ DATA DESCRIPTIONS: Corporate documents, contracts\agreements, production data, corporate correspondence,financial documents, employee personal folders\files, etc.

Victim:   |  Group: 
US flag

www.imgenterprises.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-15 16:34
Estimated Attack Date: 2025-02-07

[AI generated] IMG Enterprises is a Florida-based company specializing in horticulture, agriculture, and transportation. Its services range from growing and selling premium quality plants to offering transportation and logistics solutions. They also own vast plant nurseries and tree farms. IMG Enterprises operates under three divisions: Cherrylake, Cherryridge, and Reliable Trucking, each with its own area of expertise.

Victim:   |  Group: 
GB flag

Genus 

Company logo
Ransomware Group:

Discovery Date: 2025-02-14 14:31

Genus is the most comprehensive low-code application development platform to rapidly build and continuously improve enterprise app lications. We are ready to upload some of essentials corporate documents suc h as: NDA’s, contact numbers and e-mail addresses of employees an d customers, financial data (audits, payment details, reports), e tc.

Group: 
ES flag

Vicky Foods 

Company logo
Ransomware Group:

Discovery Date: 2025-02-12 13:51

Vicky Foods Company have an egg factory in Terrateig, a plastic f ilm packaging factory in La Pobla del Duc and a factory that prod uces and packages dried fruits and nuts in Las Palmas. We are ready to upload more than 10 GB of sensitive corporate doc uments such as: contact numbers and e-mail addresses of employees and customers, DNI numbers, personal signatures, financial data (audits, payment details, reports), confidential licenses, agreem ents and contracts, etc.

Group: 
AU flag

Natures Organics 

Company logo
Ransomware Group:

Discovery Date: 2025-02-11 15:54

Natures Organics manufacturer of sustainable and eco-friendly food and personal care products. Natures Organics corporate office is located in 31 Cornhill St, Ferntree Gully, Victoria, 3156, Australia and has 88 employees. The total amount of data leakage is 142.85

Victim:   |  Group: 
US flag

Braum's 

Company logo
Ransomware Group:

Discovery Date: 2025-02-11 15:50
Estimated Attack Date: 2024-07-16

Braum's (founded in 1968) is a family-owned fast-food restaurant chain and dairy shop. Braum's corporate office is located in PO Box 25429, Oklahoma City, Oklahoma, 73125, United States and has 6,500 employees. The total amount of data leakage is 612.50 GB

Braum's has been previously claimed by Hunters for an attack estimated on 2024-07-16.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-02-11

Victim:   |  Group: 
US flag

diazfoods.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-10 20:03

[AI generated] Diaz Foods is a leading importer and distributor of specialty foods from Latin America and Spain in the U.S. The company offers a wide range of products including canned goods, bakery items, meat, seafood and beverages, among others. Founded in 1980, Diaz Foods serves retail grocers, foodservice operators, and wholesale distributors. Over the years, it has developed a reputation for quality products and customer service.

Victim:   |  Group: 
US flag

cedarsfoods.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-10 19:48

[AI generated] Cedars Foods is a family-owned and operated food company based in the US, best known for producing Mediterranean cuisines. They are well-recognized for their signature hommus, created based on traditional family recipes. Apart from hommus, their product line also includes other Mediterranean dishes such as various salads, tzatziki, and Pita Chips. They are committed to offering fresh and high-quality food products made from all-natural ingredients. They prioritize sustainability and environmental consciousness in their operations.

Victim:   |  Group: 
CA flag

CAPITALFINEMEATS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-10 15:24

[AI generated] Capital Fine Meats is a Canadian company that specializes in handcrafted & naturally wood-smoked meat products. It was established in 1929 and is a family-owned business. Their product line includes sausages, hams, bacons, and other ready-to-eat smoked meats. Known for their quality and exceptional taste, they ship to retailers across Canada. They practice the most stringent food safety procedures and hold a Level 2 SQF certification.

Victim:   |  Group: 
US flag

ALLTECH.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-10 14:39

[AI generated] Alltech.com is a leading global company specializing in animal health and nutrition, crop science, and brewing and distilling. Founded in 1980, Alltech.com develops innovative, natural products to support animals, plants and people for better health and performance. Focused on sustainable, science-driven solutions, their products aim to benefit the triple bottom line of people, animals, and the planet.

Victim:   |  Group: 
US flag

True World Foods 

Company logo
Ransomware Group:

Discovery Date: 2025-02-10 14:17

True World Foods (founded in 1975) global supplier of fresh and frozen products. True World Foods corporate office is located in 24 Link Dr, Rockleigh, New Jersey, 07647, United States and has 371 employees.

Victim:   |  Group: 
CA flag

herbalcanadaonline.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-07 21:43

[AI generated] Herbal Canada Online is a company that specializes in providing high-quality natural herbal supplements and health products. Their offering includes a variety of herbal wellness items ranging from vitamins, nutritional supplements, to essential oils, sourced sustainably. This Canadian-based online marketplace endorses holistic health promotion and focuses on serving customers who prioritize natural and organic products to maintain their wellbeing.

Victim:   |  Group: 
 flag

Tropical Foods Company Inc 

Company logo
Ransomware Group:

Discovery Date: 2025-02-07 13:32

Tropical Foods specializes in premium raw and freshly roasted nut s and seeds, dried fruit, snack mixes, bulk & packaged candies, s pices and specialty foods. We are ready to upload more than 56 GB of sensitive corporate doc uments such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports) , confidential licenses, agreements and contracts, etc.

Group: 
US flag

savoiesfoods.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-06 19:24
Estimated Attack Date: 2025-01-28

Grocery Retail. “Savoie's® creates authentic Cajun products using family recipes handed down for generations. From the popular roux used in gumbos and gravies to smoked sausage, boudin and tasso, Savoie's® products are currently available in grocery stores across the Gulf South and restaurants across the country. ” Website: https://savoiesfoods.com/ Revenue : $18.2M Address: 1742 Hwy 742, Opelousas, Louisiana, 70570, United States Phone Number: (337) 942-7241 Download link #1: https://[redacted].onion/SAVOIESFOODS/PROOF/ Mirror: https://[redacted].onion/SAVOIESFOODS/PROOF/ DATA DESCRIPTIONS: Personal Identifiable information, database backups, outlook backups, employees and executives personal docs, corporate correspondence, financial data, customer docs\agreements, corporate correspondence, etc.

Victim:   |  Group: 
US flag

Banfi Vintners 

Company logo
Ransomware Group:

Discovery Date: 2025-02-05 18:55

Banfi Vintners, the exclusive importer of Riunite in the United States, was founded in New York in 1919 by John F. Mariani, Sr. and built into America's leading wine marketer over the last four decades. The company continues to be family-owned by the founder's children and grandchildren, who are also proprietors of the Castello Banfi vineyard estate in Montalcino, Tuscany; Vigne Regali Cellars in Strevi, Piedmont; and Pacific Rim Winery in Washington's Columbia Valley.

Victim:   |  Group: 
CA flag

Sheridan Nurseries 

Company logo
Ransomware Group:

Discovery Date: 2025-02-03 21:12
Estimated Attack Date: 2025-01-23

Canada

Victim:   |  Group: 
US flag

KWS 

Company logo
Ransomware Group:

Discovery Date: 2025-02-03 21:04
Estimated Attack Date: 2025-01-24

United States

KWS has been previously claimed by Blackbasta for an attack estimated on 2023-03-08.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-02-03

Victim:   |  Group: 
 flag

Land and Lakes 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 18:32

Land and Lakes Company has been providing excavation services since our inception in 1966. During the past 41 years, we have moved hundreds of millions of cubic yards of earth while completing both construction projects and environmental projects.

Victim:   |  Group: 
CL flag

garcesfruit.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 15:19

Extract from Taking stock of 2024 Part 1

Victim:   |  Group: 
RS flag

centerracoop.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 15:18

Extract from Taking stock of 2024 Part 1

Victim:   |  Group: 
US flag

allbrightcotton.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 15:14

Extract from Taking stock of 2024 Part 1

Victim:   |  Group: 
CA flag

cannara.ca 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 15:08

Extract from Taking stock of 2024 Part 1

Victim:   |  Group: 
CA flag

sunrise-soya.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-30 23:13
Estimated Attack Date: 2025-01-21

Grocery Retail. “Since 1956, families have trusted Sunrise Soya Foods to provide the best quality tofu to serve at the dinner table. From the first block of tofu to becoming the largest manufacturer in Canada, Sunrise has evolved the tofu market. Making nutritious soy products is our passion and it’s our way of honouring timeless traditions — past, present and future.” Website: https://sunrise-soya.com/ Revenue : $42.2M Address: 729 Powell St, Vancouver, British Columbia, V6A 1H5, Canada Phone Number: (604) 253-2326 Download link #1: https://[redacted].onion/SUNRISE/PROOF/ Mirror: https://[redacted].onion/SUNRISE/PROOF/ DATA DESCRIPTIONS: Personal identifiable information, database backups, corporate confidential docs, agreements, employees/executives personal files, financial data, HR dept docs, engineering\QA data, corporate correspondence etc.

Victim:   |  Group: 
US flag

Jalaram Produce 

Company logo
Ransomware Group:

Discovery Date: 2025-01-30 11:48

Jalaram Produce offers a high-quality line of the freshest produce delivered daily, with a focus on customer satisfaction. They provide an extensive variety of fresh fruits and vegetables, always maintaining fair and competitive prices. Online ordering is quick and convenient, allowing customers to easily place orders from their PC, tablet, or smartphone. Jalaram Produce prides itself on providing the highest standard of products and services, ensuring satisfaction guaranteed

Victim:   |  Group: 
US flag

Cahoon Farms 

Company logo
Ransomware Group:

Discovery Date: 2025-01-29 15:54

United States

Victim:   |  Group: 
PY flag

Kurosu & Co.SA - kurosu.com.py 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 08:17

Kurosu & Co.SA - kurosu.com.py LEAKED

Kurosu & Co.SA - kurosu.com.py has been previously claimed by Funksec for an attack estimated on 2024-12-10.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
RO flag

www.al-shefafarm.ro 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 07:36

www.al-shefafarm.ro

www.al-shefafarm.ro has been previously claimed by Ransomhub for an attack estimated on 2024-02-23.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
US flag

Baca County Feedyard, Inc 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 07:26

Baca County Feedyard, Inc

Baca County Feedyard, Inc has been previously claimed by Ransomhub for an attack estimated on 2024-04-09.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
CO flag

www.industrialdealimentos.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 07:14

www.industrialdealimentos.com

www.industrialdealimentos.com has been previously claimed by Ransomhub for an attack estimated on 2024-03-20.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
BR flag

www.lapastina.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 07:13

www.lapastina.com

www.lapastina.com has been previously claimed by Ransomhub for an attack estimated on 2024-03-20.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
 flag

ALPINEFOODS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-01-24 08:57

[AI generated] AlpineFoods.com is a reputed company engaged in the food and beverage industry. They offer a wide range of premium quality food items and drinks to their customers online. Their product list includes everything from fresh produce, dairy, meats, frozen foods to bakery items, prepared meals, and snacks, allowing customers to enjoy fresh and healthy food at home. They are recognized for their exceptional customer service and prompt delivery system.

Victim:   |  Group: 
JP flag

NISSINFOODS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-01-24 08:34

[AI generated] Nissin Foods is a renowned Japanese food company that specializes in the production and sale of convenience foods. The company was established in 1948 by Momofuku Ando, the inventor of instant noodles. Its key products include instant ramen and cup noodles, which have become globally recognized. Nissin Foods operates in numerous countries, providing diverse palate choices with their individualized instant noodle flavors. They are known for their innovation, quality, and taste in the fast-food market.

Victim:   |  Group: 
US flag

miedemaproduce.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-21 22:56

[AI generated] Miedema Produce, Inc is a family-owned business that specializes in growing, packaging, and distributing fresh produce. Founded in 1958, the Michigan-based company focuses on onions and carrots, offering a variety of sizes and packaging options. They are well-known for their commitment to quality and sustainability. They distribute their produce both domestically and internationally, providing farm-fresh products to consumers year-round.

Victim:   |  Group: 
DO flag

cana group corp 

Company logo
Ransomware Group:

Discovery Date: 2025-01-20 13:59

cana group corp Cana Group Corp, through its brands Cana, Guidom, Fresh Cana all the consuming public addresses, anticipating new trends and knowing the tastes and expectations of customers, in order to respond to their needs.Geo: Dominican Republic - Leak size: NO DATA - Contains: NO DATA

Victim:   |  Group: 
US flag

safecoastseafoods.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-15 22:47
Estimated Attack Date: 2025-01-04

[AI generated] Safecoast Seafoods is a premium seafood sourcing and distribution company. They are focused on delivering the highest quality fresh and frozen seafood to various markets. They partner with sustainable fisheries worldwide, ensuring they offer a wide variety of species. Their services include wholesale distribution, home delivery and even private labeling, meeting the needs of restaurants, markets, and individual consumers alike.

Victim:   |  Group: 
US flag

QualiTech (qualitech.com) 

Company logo
Ransomware Group:

Discovery Date: 2025-01-14 12:45

QualiTech Environmental provides consulting, training, equipment and support to combat and remediate oil spills. The organization partners with a number of the leading equipment and service providers to deliver top-in-class, end-to-end solutions to the response industry.

Victim:   |  Group: 
BR flag

Moinho Globo Alimentos 

Company logo
Ransomware Group:

Discovery Date: 2025-01-14 12:22
Estimated Attack Date: 2024-12-05

Moinho Globo Alimentos is currently the fourth largest milling in dustry in the state, with an installed milling capacity of 12,500 tons/month. We are ready to upload more than 58 GB of private corporate docum ents such as: contact numbers and e-mail addresses of employees a nd customers, personal CNP/CPF/NIF, internal financial documents , etc.

Victim:   |  Group: 
CA flag

avril.ca 

Company logo
Ransomware Group:

Discovery Date: 2025-01-11 11:24
Estimated Attack Date: 2024-12-12

Avril Supermarché Santé, an independent health food supermarket chain based in Quebec, Canada. Founded in 1995, Avril aims to promote a healthy lifestyle by making natural and organic products accessible to everyone. The company operates multiple stores across Quebec and offers a wide range of products, including groceries, supplements, beauty items, and ready-to-eat meals.SITE: www.avril.caADDRESS: 11 rue Évangéline Granby, Quebec, J2G 6N3 Canada.TEL#: 1-844-375-6446ALL DATA SIZE: ≈550gb+ 1. Financial data, Accounting 2. Human Resources 3. Personal employees documents 4. DirectionMagasin 5. Marketing & etc…

Victim:   |  Group: 
BR flag

acquafertil.com.br 

Company logo
Ransomware Group:

Discovery Date: 2025-01-08 09:46
Estimated Attack Date: 2024-12-27

[AI generated] Acquafértil is a Brazil-based company specializing in biological and environmental engineering. They offer solutions for water treatment and conservation, waste management, and environmental recovery. They use advanced technologies, in sync with nature, to efficiently manage natural resources and promote sustainable development. Their commitment to environmental sustainability goes beyond business, addressing broader social needs.

Victim:   |  Group: 
US flag

Bergström Wines 

Company logo
Ransomware Group:

Discovery Date: 2025-01-07 13:34

Bergström Wines is a family—owned winery founded in 1996 in Willamette Valley, Oregon. The company produces wines from grapes grown in environmentally friendly wineries. The wine reflects the peculiarities of the region and seasonality, with an emphasis on natural agriculture. Bergström Wines aims to create a wine that helps reveal the beauty of this place and brings joy to people. bergstromwines.com

Victim:   |  Group: 
FR flag

HECTARE 

Company logo
Ransomware Group:

Discovery Date: 2025-01-07 09:32

HECTARE, land developer since 1985. Wide choice of building plots for sale. HECTARE SUSTAINABLE URBANISM uses its planning expertise to create living spaces; by understanding a site and transforming it in line with its environment while respecting its major issueshttps://www.hectare.fr/

Victim:   |  Group: 
US flag

A Bar A Ranch 

Company logo
Ransomware Group:

Discovery Date: 2025-01-06 15:09
Estimated Attack Date: 2024-12-06

Along the banks of the North Platte River, in the heart of southe rn Wyoming’s Medicine Bow Mountains, lies the A Bar A Ranch. Esta blished in 1922, it is one of the oldest guest ranches in the cou ntry. It is also one of the largest, with nearly 100,000 acres fo r guests and staff to explore. We are ready to upload a lo of private corporate documents includ ing: financial data (audits, payment details, reports), contact n umbers and e-mail addresses of customers and employees, insurance documents, lease agreements etc.

Victim:   |  Group: 
US flag

Bluegrass Ingredients 

Company logo
Ransomware Group:

Discovery Date: 2025-01-06 13:54

Bluegrass helps leading brands and flavor houses concept, test an d produce the custom flavors and formulations they need to stay a head. We are ready to upload more than 45 GB of private corporate docum ents including: NDAs, SSNs, financial data (audits, payment detai ls, reports), contact numbers and e-mail addresses of employees e tc.

Victim:   |  Group: