Machu Picchu Foods listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: Peru
• Sector: Agriculture and Food Production
• Announcement date: March 19, 2025

Akira ransomware group targets Machu Picchu Foods

The Akira ransomware group has officially listed the Peruvian food production company Machu Picchu Foods on its dedicated leak site. According to the announcement made by the threat actors on March 19, 2025, the group intends to publish sensitive data belonging to the organization. This development follows a period of alleged unauthorized access to the company's internal systems, marking a significant escalation in the cyberattack targeting the Peruvian agricultural sector.

Ransomware leak sites serve as a platform for cybercriminal groups to exert pressure on their victims. In many modern cyberattacks, groups employ a method known as double extortion. This tactic involves not only encrypting an organization's data to disrupt operations but also stealing sensitive information to use as leverage. By threatening to leak confidential files on a public forum, attackers aim to force the victim into paying a ransom to prevent the public disclosure of their proprietary and personal information.

Details of the alleged breach

The Akira ransomware group claims to have successfully gained access to the systems of Machu Picchu Foods on January 29, 2025. The group's announcement alleges that they have compromised various types of corporate and financial data. While the group has made these claims, no screenshots have been provided to verify the contents of the alleged breach.

The information reportedly targeted by the attackers includes a variety of sensitive business and personal records. Based on the claims made by the group, the following types of data are allegedly involved:

• Financial data
• Employee contact information
• Customer contact information
• Corporate licenses
• Agreements

The specific volume of the stolen data and the total number of files involved have not been disclosed by the group. Furthermore, no specific ransom demand has been made public in the current announcement.

About Machu Picchu Foods

Machu Picchu Foods is a prominent food company based in Peru. The organization operates as a specialized supplier of cacao ingredients and chocolate. In addition to its role as a supplier, the firm provides contract manufacturing services for various private labels. The company specializes in the processing and distribution of cocoa-based products, making it a key player in the regional food production industry.

Potential impact and industry implications

This incident highlights the significant risks faced by organizations when sensitive data is exposed to third parties. The potential leakage of financial data, such as audits, payment details, and reports, could create substantial risks for the organization's commercial operations and may lead to a loss of customer trust. Furthermore, the disclosure of contact information for both employees and customers can facilitate secondary attacks, such as identity theft or highly targeted phishing campaigns.

The use of double extortion by groups like Akira places immense pressure on an organization's operational continuity. Beyond the immediate technical disruption, organizations facing such breaches may also encounter legal obligations and regulatory scrutiny under relevant data protection laws. For companies in the food production and supply chain sector, maintaining the integrity of corporate licenses and agreements is vital for operational stability.

To mitigate such risks, organizations typically focus on strengthening their defensive posture through several key areas. Implementing robust access controls and multi-factor authentication can help prevent unauthorized entry into sensitive systems. Regular monitoring of network traffic can assist in the early detection of suspicious activity. Additionally, maintaining comprehensive backups and conducting regular security awareness training for employees are standard practices to defend against the evolving tactics used by ransomware groups.