DILOSA FOOD COMPANIES listed on incransom leak site

• Ransomware group: incransom
• Country: El Salvador
• Sector: Agriculture and Food Production
• Announcement date: October 29, 2025

DILOSA FOOD COMPANIES targeted by incransom

The food production and distribution company DILOSA FOOD COMPANIES has been listed on the leak site of the ransomware group known as incransom. This listing, which appeared on October 29, 2025, marks a claim of a data breach against the El Salvador-based organization.

The announcement by the threat actor suggests that the company is the subject of a targeted operation. While the listing confirms the group's intent to publicize the incident, the specific details regarding the breach remain limited to the information provided by the attackers on their platform.

The details of the claim

According to the post made by incransom on October 29, 2025, the group has created a dedicated entry for DILOSA FOOD COMPANIES. This entry includes the organization's contact information and various operational details. Notably, the threat actor claims that the organization has an annual revenue of 5 million dollars.

Ransomware leak sites serve as a platform for cybercriminals to exert pressure on their victims. By listing a company, these groups aim to damage the victim's reputation and create urgency for a ransom payment. In this instance, the group has moved to publicize the target's existence and financial scale as part of their operational procedure.

Information regarding the compromised data

At this stage, there is no specific information provided regarding the content of the compromised or threatened data. The listing does not specify the types of files or the volume of information that has been targeted. The only details shared by the group involve the organization's contact details and the aforementioned financial figures.

Because the specific nature of the data has not been disclosed, it is impossible to determine the exact scope of the breach from the current announcement. The listing currently names no specific data types.

The organization profile

DILOSA is a food production and distribution company based in El Salvador. It operates in the food sector, focusing on the supply and sale of various food products.

Risk assessment and sectoral implications

The incransom group is known for employing double-extortion tactics. In a double-extortion scenario, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. They threaten to publish this data on public leak sites if a ransom is not paid, effectively using the threat of exposure as a tool for coercion.

This incident indicates a potential risk that the organization's sensitive data could be published. If sensitive information is released, employees and customers of the organization may be vulnerable to identity theft or targeted phishing attacks. Such attacks often leverage stolen personal or corporate details to deceive individuals into revealing further credentials or transferring funds.

From a sectoral perspective, the exposure of operational data within the food supply chain could harm the organization's commercial reputation and business processes. Disruptions or the loss of trust in the supply chain can have cascading effects on distribution and consumer confidence. Given the group's past activities, the possibility of data being made public in the event that a ransom is not paid should be considered a significant risk.

To mitigate such risks, organizations in the food production and distribution sector can implement various defensive measures. This includes maintaining robust backup solutions, implementing strict access controls, and conducting regular security awareness training for employees to prevent phishing. Monitoring for unauthorized data exfiltration and maintaining a comprehensive incident response plan are also critical steps in defending against double-extortion ransomware tactics.