Bartek Ingredients listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: Canada
• Sector: Agriculture and Food Production
• Announcement date: September 2, 2025

Inc Ransom claims data breach at Bartek Ingredients

The threat actor group known as Inc Ransom has officially listed the Canadian organization Bartek Ingredients on its dedicated leak site. According to the announcement made on September 2, 2025, the group claims to have successfully breached the organization's network and exfiltrated sensitive information. This development follows a claimed attack date of September 1, 2025.

The listing serves as a public demonstration of the group's activities. In such scenarios, ransomware groups often use leak sites to exert pressure on their targets. This technique is a hallmark of modern cyber extortion, where the threat of releasing stolen data is used as leverage to demand payment. While the specific details regarding the total volume of data stolen or the specific ransom amount have not been disclosed by the group, the announcement confirms that the organization's data has been targeted.

Details of the alleged intrusion

The post published by Inc Ransom on its platform includes various details regarding the operations of Bartek Ingredients. The threat actor has provided information concerning the company's business activities and has displayed sample documents that are alleged to have been stolen during the breach. These samples are intended to prove the validity of the group's claims to the public and the victim.

Based on the visual evidence provided in the screenshots released by the attackers, the stolen information appears to include sensitive documentation. Specifically, the content includes:

• Identity documents

>

These documents appear to belong to employees or third parties associated with the organization. The exposure of such personal identification information poses significant risks to the individuals involved, as it can be utilized for malicious purposes by various threat actors.

About Bartek Ingredients

Bartek Ingredients is a specialized player within the agriculture and food production sector. Founded in 1969, the company focuses on the manufacturing and global sales of malic and fumaric acid. As a long-standing entity in the food ingredients industry, the company maintains a global presence in the supply chain for these specific chemical components.

Impact and security implications

This incident highlights the utilization of a double-extortion strategy by the Inc Ransom group. In a double-extortion model, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive data to threaten its public release. This dual approach increases the pressure on the victim, as the threat of a data leak can cause lasting damage to commercial reputation and operational continuity.

The exposure of identity documents carries specific risks for the affected individuals, including the potential for identity theft and the execution of highly targeted phishing attacks. Because Bartek Ingredients is based in Canada, this incident may trigger mandatory data breach notification requirements under the Personal Information Protection and Electronic Documents Act (PIPEDA) regulations.

For organizations operating in the food production and global supply chain sectors, such incidents underscore the necessity of robust cybersecurity frameworks. Defensive strategies typically involve implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular network segmentation to prevent lateral movement by attackers. Furthermore, continuous monitoring and employee awareness training are essential to mitigate the risks of initial access and subsequent data exfiltration.

Inc Ransom has been an active threat actor since mid-2023, and the group is known to have targeted numerous organizations using these similar methods of extortion and data leakage.