Fruttagel data allegedly leaked by ALPHV ransomware group

• Ransomware group: ALPHV
• Country: Italy
• Sector: Agriculture and Food Production
• Announcement date: July 26, 2023

ALPHV claims to have leaked Fruttagel data

The ALPHV ransomware group has listed data it claims belongs to the Italy-based company Fruttagel on its leak site. According to the announcement, the group has released a significant amount of information, alleging that the data size reaches 755 GB. This type of activity is characteristic of modern ransomware operations, where threat actors utilize leak sites to host stolen information to exert pressure on the targeted organization.

The group's announcement alleges that the stolen data includes a wide variety of sensitive information, ranging from financial documents to personal records. By publishing such a large volume of data, the group appears to be aiming to increase the pressure on the organization through public exposure. While the specific details of the attack remain part of the group's claims, the scale of the alleged breach is substantial.

Details of the alleged data breach

The information provided by the group suggests a deep compromise of corporate and personal files. The announcement claims to contain various types of sensitive documentation, including financial documents, customer data, and credit card information. Furthermore, the group alleges to have obtained contracts with major companies such as IKEA and PepsiCo, as well as SGS certificates and GDPR compliance files. The leak also reportedly includes employee contact details and management correspondence.

To support their claims, the group has provided screenshots that allegedly show examples of highly sensitive documents. These include passport copies, health cards, and various corporate budget files. The inclusion of such personal identification documents increases the potential impact of the leak on the individuals involved. The specific data types identified in the listing include:

• Financial documents
• Customer data
• Credit card information
• Contracts
• GDPR compliance files
• Employee contact details
• Passport copies
• Health cards

About Fruttagel

Fruttagel is an Italian food company founded in 1994 in Ravenna. The company specializes in the processing of fresh fruit. Its production capabilities include the manufacturing of fruit and vegetable-based beverages as well as various frozen food products.

Risk assessment and implications

The alleged leak of this data may create significant secondary risks. For the employees and customers whose information was potentially exposed, there is an increased risk of identity theft and targeted phishing attacks. Because the organization is based in Italy, the leaked data may fall under the scope of the General Data Protection Regulation (GDPR), which could potentially lead to legal consequences for the company.

The exposure of confidential contracts with major supply chain partners, such as those mentioned in the claim, may lead to a loss of commercial reputation and potential long-term operational disruptions. The ALPHV (BlackCat) group, known for using Rust-based methods, has historically been associated with complex encryption and double extortion techniques. In double extortion, attackers not only encrypt the data but also threaten to leak it to maximize their leverage.

For organizations operating in the food production and supply chain sectors, such incidents highlight the importance of robust cybersecurity frameworks. Protecting sensitive commercial contracts and personal data is vital to maintaining business continuity and trust. While information about this specific group remains limited, the potential for significant operational and legal impact remains a primary concern for targeted entities.