Casale Del Giglio listed on orca ransomware leak site

• Ransomware group: orca
• Country: Italy
• Sector: Agriculture and Food Production
• Announcement date: April 27, 2026

Casale Del Giglio listed on orca ransomware leak site

The Italian winery Casale Del Giglio has been listed on the leak site associated with the ransomware group known as orca. According to the announcement made on April 27, 2026, the threat actor claims to have successfully breached the organization's systems and exfiltrated data.

Details of the alleged attack

The threat actor identified as orca claims to have published data belonging to Casale Del Giglio on its dedicated leak site on April 27, 2026. The group alleges that it gained unauthorized access to the organization's internal systems and subsequently exfiltrated data from those systems. While the group has made this public claim, information regarding the specific identity and typical operations of the orca group remains limited in the public domain.

Ransomware groups often utilize leak sites as a tool for double extortion. In these scenarios, attackers not only encrypt an organization's data to disrupt operations but also threaten to release sensitive information publicly to pressure the victim into paying a ransom. By listing a target on a leak site, the group aims to increase visibility and pressure the organization through the threat of reputational damage and regulatory scrutiny.

Data involved in the claim

At this time, no information has been provided regarding the specific nature or content of the leaked data, and no screenshots have been made available to verify the claim. The listing does not name any specific data types.

About Casale Del Giglio

Casale Del Giglio is a well-established winery operating in the Lazio region of Italy. Founded in 1967 by Dr. Berardino Santarelli, the company is recognized for its viticultural research and its implementation of innovative winemaking techniques within the region.

Risk assessment and organizational implications

The alleged leak poses significant risks to the organization's operational continuity and data privacy. Depending on the actual content of the claimed data, the incident could trigger legal processes under the European Union's General Data Protection Regulation (GDPR). Such regulatory frameworks are designed to protect individual privacy, and breaches involving personal information often necessitate formal reporting and investigation.

Furthermore, the organization's employees and customers may be rendered vulnerable to various secondary threats. These include identity theft or targeted phishing attacks, where attackers use stolen information to impersonate legitimate entities or individuals to deceive victims. There is also the secondary risk that any leaked information could be utilized as a component in broader supply chain attacks, potentially impacting the organization's business partners and vendors.

For organizations operating in the agriculture and food production sector, maintaining robust data security measures is critical. To mitigate these risks, it is advisable for organizations to review their existing data security protocols and implement proactive monitoring to detect potential breaches early. Common defensive steps include maintaining regular, offline backups, implementing multi-factor authentication, and conducting regular security awareness training for all staff members to recognize phishing attempts.