Great Foods listed on lamashtu ransomware leak site
Egypt-based food manufacturer Great Foods has been listed on the leak site of the lamashtu ransomware group.
- Published
- 3 min read
- 3 min read
- Ransomware group: lamashtu
- Country: Egypt
- Sector: Agriculture and Food Production
- Announcement date: June 17, 2026
Lamashtu claims data breach against Great Foods
The lamashtu ransomware group has listed the Egyptian food manufacturer Great Foods on its leak site. According to the announcement made on June 17, 2026, the threat actor claims to have successfully exfiltrated a significant amount of data from the organization. This listing follows a pattern often seen in modern cyberattacks where groups utilize leak sites to pressure organizations through the threat of public data exposure.
The group claims that the attack occurred on June 17, 2026. While the specific details regarding the method of entry remain undisclosed, the group has published an announcement regarding a data leak rather than a direct ransom demand. This type of activity is characteristic of ransomware groups that employ double extortion tactics, where they not only encrypt systems but also threaten to release sensitive information to maximize leverage over the victim.
Details of the claimed data leak
The lamashtu group claims to have leaked a dataset that it asserts belongs to Great Foods. The volume of the stolen information is reported to be 40 GB, comprising approximately 65,000 files. The group states that the stolen data covers operational processes spanning from 2023 to 2026. This timeframe suggests that the breach may involve several years of historical and recent organizational activity.
The content of the leaked dataset is described as being highly sensitive, involving various aspects of the company's internal operations. The group claims the files include the following types of information:
- Financial records
- Commercial invoices
- Customer data
- Production reports
- Payroll records
- Internal audit documents
- Quality assurance documents
- R&D data
The presence of such diverse data types indicates a broad compromise of the organization's digital environment, touching upon finance, human resources, production, and research departments.
About Great Foods
Great Foods is an Egyptian food manufacturing and distribution company that operates under the El Naggar Group. Founded in 1972, the organization has established a significant presence in the food sector. With a workforce of over 3,700 employees, the company manages an extensive product portfolio, exporting more than 150 products to more than 40 different countries.
Potential risks and industry implications
The claim made by lamashtu carries significant risks for Great Foods. The exposure of sensitive commercial and operational data could lead to various complications for the organization. Specifically, the presence of employee and customer data within the leaked dataset could provide a foundation for identity theft or targeted phishing attacks against individuals associated with the company. Such attacks often leverage the stolen information to gain further access to corporate systems or to defraud employees and clients.
Furthermore, the exposure of supply chain data may pose secondary risks for the organization's commercial partners. In a globalized food production industry, the compromise of one major player can have ripple effects across the network of suppliers and distributors. The organization may also face legal challenges within the framework of data protection regulations in Egypt due to the potential exposure of personal and sensitive information.
In the broader context of ransomware, organizations in the food and agriculture sector often face risks related to the disruption of production and the loss of intellectual property. While public information regarding the lamashtu group remains limited, this incident highlights the ongoing threat posed by ransomware actors targeting large-scale manufacturing and distribution entities. Defensive measures typically include robust data encryption, strict access controls, and comprehensive monitoring to detect unauthorized data exfiltration before it reaches a scale of 40 GB.