Letry listed on leak site of global ransomware group

• Ransomware group: global
• Country: Belgium
• Sector: Agriculture and Food Production
• Announcement date: June 11, 2025

The Belgium-based company Letry has reportedly been listed on the leak site of a threat group known as global. According to the announcement made on June 11, 2025, the group claims to have successfully exfiltrated data belonging to the organization.

The alleged data breach

The threat group identified as global has officially announced the involvement of Letry on its dedicated leak site. This announcement serves as a claim that the institution's data has been stolen through a cyberattack. While the listing confirms the group's intent to publicize the breach, public information regarding the specific identity and operational details of the group known as global remains limited.

At this stage of the incident, the threat group has not provided specific details regarding the nature of the stolen information. There are no screenshots or specific descriptions provided to clarify what the leaked content entails. Furthermore, the group has not disclosed the total size of the data stolen or the specific number of files involved in the breach. There is also no information available regarding whether a ransom demand has been issued or what the specific terms of the threat might be.

The organization

Letry is a garden center and nursery located in Céroux, Belgium. The company provides a variety of services aimed at both novice and experienced gardeners, including garden planning, specialized workshops, and various training services. As a provider of resources and support for the gardening community, the company maintains a presence in the agriculture and food production sector.

Potential risks and industry implications

The alleged leak of Letry's data introduces several significant risks that the organization may face. One of the primary concerns is the potential for secondary attacks. When organizational data is exfiltrated, it can be used to facilitate identity theft or to launch targeted phishing attacks against the company's employees and its customer base. Such attacks often leverage the stolen information to gain further access to systems or to defraud individuals.

Because Letry is based in Belgium, this incident carries significant legal implications. A confirmed data breach involving personal information can trigger mandatory legal obligations and potential sanctions under the General Data Protection Regulation (GDPR). Organizations operating within the European Union must adhere to strict protocols regarding data protection and the notification of breaches to ensure compliance with these regulations.

Furthermore, the disclosure of commercial data within the agriculture and gardening sector could pose a direct threat to the company's competitive advantage. The loss of proprietary business information can be detrimental to an organization's market position. Additionally, the ongoing uncertainty regarding the threat group's next steps—whether they choose to publish more data or escalate ransom demands—creates a volatile environment for the company's operational continuity.

General cybersecurity context

This incident highlights the growing trend of double extortion tactics used by ransomware groups. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also focus on exfiltrating sensitive data to use as leverage during negotiations. The threat of leaking sensitive information on public sites is a common method used to pressure victims into paying ransoms.

For organizations in the agriculture and food production sectors, maintaining robust defensive measures is critical. This includes implementing strong access controls, maintaining regular offline backups, and conducting regular security awareness training to protect against phishing. As threat groups continue to target various sectors, the ability to respond quickly to a data exfiltration claim is vital for mitigating long-term legal and operational damage.