Skip to content
Ransomware

Del Monte Foods targeted by payoutsking ransomware group

The ransomware group payoutsking claims to have leaked 1.2 TB of data allegedly belonging to Del Monte Foods on their leak site.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: payoutsking
  • Country: United States
  • Sector: Agriculture and Food Production
  • Announcement date: April 30, 2026

Payoutsking claims data leak against Del Monte Foods

The ransomware group known as payoutsking has announced on its dedicated leak site that it has allegedly leaked a significant amount of data belonging to the American food company, Del Monte Foods. According to the announcement made on April 30, 2026, the group claims to have exfiltrated and encrypted a substantial volume of information from the organization's systems.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, threat actors do not only encrypt an organization's internal systems to disrupt operations but also steal sensitive data to use as leverage. By threatening to release this stolen information on public leak sites, attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential corporate or personal information.

Details of the alleged cyberattack

According to the claims made by payoutsking, the cyberattack against Del Monte Foods was conducted on February 19, 2026. The group alleges that they successfully breached the organization's network, allowing them to both encrypt and exfiltrate data from the company's infrastructure. This dual-action approach is a hallmark of modern ransomware operations, designed to maximize the pressure placed on the target organization.

The group's announcement was posted on their specific leak site, which serves as a platform for claiming responsibility for various breaches. While the group has made these claims publicly, the specific details regarding the methods used to gain access to the network or the exact nature of the breach have not been provided in the public announcement.

Data involved in the incident

The payoutsking group claims that the volume of data stolen during the attack is 1.2 TB. While a folder labeled "Confidential" was visible in the provided screenshots associated with the leak, the group has not disclosed specific details regarding the exact nature or the specific types of data contained within the leaked files.

  • No specific data types were named in the listing.

About Del Monte Foods

Del Monte Foods is a well-established American food company specializing in the production and distribution of various food products, including fruits, vegetables, and tomato-based items. The company serves both retail and food service sectors by offering a wide range of packaged food products.

Potential impact and organizational risks

This incident may pose a risk of exposure for the personal data of employees or business partners within Del Monte Foods. As a US-based entity, the organization may be subject to data breach notification requirements under relevant state laws and federal regulations. Depending on the content of the leaked data, potential impacts on the organization's supply chain operations and trade secrets may be observed.

Public information regarding the payoutsking group is limited; therefore, the group's methods and motivations remain uncertain. When organizations face such threats, they often need to implement measures against secondary risks such as identity theft and targeted phishing attacks that may arise from the exposure of sensitive information.

In the agriculture and food production sector, maintaining the integrity of supply chain operations and protecting trade secrets is vital. A breach of this scale can lead to operational disruptions or the loss of proprietary information that provides a competitive advantage. Organizations in this sector typically focus on robust defensive measures, such as network segmentation, multi-factor authentication, and continuous monitoring, to mitigate the risk of such intrusions and protect their digital assets.

In the Intelligence 360 plan

Executive Protection

Monitor whether your executives’ email addresses and usernames appear in leaks.

Related stories