Kasapreko listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Ghana
• Sector: Agriculture and Food Production
• Announcement date: December 6, 2025

Qilin ransomware group claims Kasapreko data breach

The Qilin ransomware group has listed Kasapreko on its leak site, alleging a data breach. This announcement, made public on December 6, 2025, suggests that the organization has been targeted by the group's operations.

Details of the alleged attack

According to the announcement made by the Qilin ransomware group on December 6, 2025, the group claims to have compromised the data belonging to Kasapreko. The group published this listing publicly, which is a common tactic used by modern ransomware actors. This specific action may have been carried out as part of the group's established double-extortion strategy.

Double-extortion is a sophisticated ransomware tactic where attackers do not merely encrypt an organization's files to disrupt operations, but also exfiltrate sensitive data before the encryption occurs. By threatening to leak this stolen information on a public site, the attackers create additional pressure on the victim to pay the ransom, moving beyond simple operational disruption to the threat of reputational damage and regulatory consequences.

Information regarding compromised data

Regarding the specific content of the breach, the information currently available is limited. The screenshot provided on the leak site is blurred, and as a result, there is no clear information regarding the content of the compromised data. The listing names no specific data types.

The target organization

Kasapreko is an organization based in Ghana that operates within the agriculture and food production sector.

Analysis and potential implications

The Qilin group is known as a Ransomware-as-a-Service (RaaS) entity that has been operating since 2022. They are recognized for employing double-extortion tactics to maximize their leverage over victims. This situation involving Kasapreko may lead to secondary risks, such as the potential publication or sale of the organization's data on the dark web.

Because the organization operates in the agriculture and food production sector, the breach could lead to disruptions in operational continuity. Furthermore, as the organization is based in Ghana, there may be challenges regarding compliance with local data protection regulations following such an incident. If the compromised data were to include employee or customer information, it could create a foundation for identity theft or targeted phishing attacks.

In general, organizations facing such threats often prioritize incident response and forensic investigations to determine the scope of the breach. Defensive measures typically include strengthening network segmentation, implementing multi-factor authentication, and maintaining robust offline backups to mitigate the impact of both data theft and encryption-based attacks. For companies in the food production industry, maintaining the integrity of supply chain data and operational systems is vital to preventing widespread logistical disruptions.