Assolim listed on RansomHouse leak site

• Ransomware group: RansomHouse
• Country: Brazil
• Sector: Agriculture and Food Production
• Announcement date: December 22, 2025

RansomHouse claims Assolim has been compromised

The RansomHouse ransomware group has officially listed the food distribution company Assolim on its dedicated leak site. The announcement, which appeared on the group's platform on December 22, 2025, follows a period of alleged unauthorized access to the company's systems. While the listing serves as a public notification from the threat actor, the details surrounding the incident remain centered on the group's own claims regarding the timeline and the nature of the breach.

According to the claims made by RansomHouse, the cyber incident involving Assolim took place on November 13, 2025. The threat group has leveled accusations against the company, alleging that the IT department attempted to conceal the occurrence of the incident. In their communication, the group has demanded that the organization contact them to prevent the further leakage of sensitive information and various project documents.

Details of the alleged data theft

The announcement provided by the RansomHouse group indicates that the breach involves sensitive information. However, the group has not provided specific details regarding the exact scope, the total volume of data, or the specific types of files that were targeted during the operation. The listing remains vague regarding the technical specifics of the exfiltrated content.

The data mentioned in the group's announcement includes:

• Confidential corporate data
• Project documents

The lack of specific information regarding the file count or the exact nature of the documents makes it difficult to assess the full extent of the potential exposure at this stage. RansomHouse typically utilizes public pressure as a method of coercion, a tactic often seen in double extortion schemes where stolen data is used to force a ransom payment.

About Assolim

Assolim is a food distribution company that serves a wide range of clients, including restaurants and hotels, throughout the Catalonia region. The company was established in 2014 following the merger of two long-standing family-owned businesses. Currently, Assolim maintains an extensive portfolio that includes over 4,000 different food products, spanning frozen, fresh, and dry goods categories.

Potential impact and organizational risks

This incident could have significant consequences for Assolim, potentially impacting its operational continuity and its commercial reputation. The alleged theft of project documents is particularly concerning, as such information could potentially undermine the company's strategic plans and its competitive advantage in the food distribution market. Furthermore, because the company operates within the European Union, this incident may trigger legal complexities, including data breach notification obligations and potential administrative sanctions under the General Data Protection Regulation (GDPR).

Given that RansomHouse has been active since 2021, with a known focus on data exfiltration and extortion, the organization may face secondary risks. These risks often include targeted phishing campaigns or identity theft stemming from the leaked information. In such scenarios, threat actors use stolen credentials or corporate details to launch more sophisticated social engineering attacks against employees or business partners.

For organizations operating in the food and agriculture sectors, maintaining robust cybersecurity posture is essential to protect supply chain integrity. Common defensive strategies include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular employee training to recognize phishing attempts. As ransomware groups continue to use public shaming to exert pressure, companies must prepare for the regulatory and reputational challenges that follow a data exfiltration event.