Machu Picchu Foods listed on sarcoma leak site

• Ransomware group: sarcoma
• Country: Peru
• Sector: Agriculture and Food Production
• Announcement date: June 24, 2025

Machu Picchu Foods targeted by sarcoma ransomware group

The threat group known as sarcoma has listed the Peruvian food company Machu Picchu Foods on its leak site. According to the announcement made on June 24, 2025, the group claims to have successfully breached the organization and is now showcasing the alleged stolen data. This development follows a pattern often seen in modern cyberattacks where threat actors use public leak sites to pressure victims into meeting specific demands.

In the landscape of contemporary cyber threats, ransomware groups frequently employ a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information. By threatening to publish this data on public forums or dedicated leak sites, the attackers aim to increase the pressure on the victim to pay a ransom, leveraging the potential for reputational damage and regulatory scrutiny.

Details of the alleged breach

The announcement made by the sarcoma group claims that the breach involves a significant amount of data. Specifically, the group asserts that they have obtained a 68 GB archive. While the sheer volume of the data is specified, the group has not provided any detailed breakdown regarding the specific contents of the files contained within the archive. Furthermore, the listing does not include any screenshots to verify the contents of the stolen information.

Information regarding the sarcoma group itself remains limited, as there is little publicly available data concerning their specific tactics, techniques, or procedures. This lack of transparency is common among emerging or niche ransomware affiliates, making it difficult for security researchers to attribute the attack or predict the group's next moves. The listing remains a claim by the threat actor, and the actual contents of the alleged 68 GB archive have not been independently verified.

Data types involved

The listing names no specific data types within the alleged breach.

About Machu Picchu Foods

Machu Picchu Foods is a company based in Peru that specializes in the production of single-origin cocoa and chocolate. The organization focuses on providing premium products that are sustainable, organic, and allergen-free. As a player in the agriculture and food production sector, the company maintains a specific focus on high-quality, specialized food ingredients for its consumer base.

Potential impact and industry considerations

The alleged breach of Machu Picchu Foods may pose a significant risk to the institution's operational continuity. In the food production sector, the exposure of sensitive information can lead to various secondary risks. For instance, the potential exposure of supply chain data or proprietary trade secrets could disrupt the company's competitive position and operational flow. Such an event can lead to a loss of reputation among the institution's customers and business partners.

Beyond operational and reputational damage, the organization may face legal obligations under Peruvian data protection regulations. When sensitive corporate or consumer data is compromised, regulatory frameworks often require formal reporting and compliance with strict privacy standards. Additionally, the act of publishing data by a threat actor increases the likelihood that the institution will be subjected to targeted phishing attacks, as the leaked information can be used to craft highly convincing social engineering campaigns against employees or partners.

To mitigate these types of risks, organizations in the food and agriculture sectors often implement defensive strategies such as network segmentation, regular offline backups, and robust access controls. Monitoring for unauthorized data exfiltration and maintaining a comprehensive incident response plan are also critical components of a modern cybersecurity posture. As attackers continue to target supply chain entities, the importance of securing both digital assets and the information that facilitates physical production remains a primary concern for global industries.