More Than Gourmet listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Agriculture and Food Production
• Announcement date: October 22, 2025

Qilin ransomware group targets More Than Gourmet

The Qilin ransomware group has listed the food production company More Than Gourmet on its dedicated leak site. According to the announcement made on October 22, 2025, the threat actor group claims to have successfully exfiltrated corporate data from the organization.

The group asserts that they have gained unauthorized access to the company's internal networks. By breaching these networks, the attackers claim they have been able to copy sensitive information. The nature of the announcement suggests that the stolen data may include information related to the company's operational and financial processes, which the group may choose to publish.

Claims of compromised sensitive information

The announcement made by the Qilin group specifies that several categories of sensitive information have been compromised during the attack. Based on the claims, the following types of data are involved in the breach:

• Employee personal data
• Financial documents
• Recipes

In addition to these categories, the group provided screenshots as evidence of the breach. These images indicate the presence of files that may contain internal correspondence and various data tables used by the organization.

About More Than Gourmet

More Than Gourmet is a food company that specializes in the production of sauces and stocks. Their products are crafted based on classic French culinary traditions. Since its establishment in 1993, the company has grown to supply its products to a variety of high-end clients, including gourmet restaurants, resorts, and specialty food stores.

Potential impact and industry implications

This incident carries significant risks for the organization. The exposure of personal data belonging to More Than Gourmet employees and the potential leak of the company's trade secrets represent major vulnerabilities. Specifically, the alleged compromise of proprietary recipes could lead to a direct loss of competitive advantage for the company in the food production market.

Because the company is based in the United States, this potential data breach may trigger legal proceedings under both state laws and federal regulations. Furthermore, the Qilin group is known for employing a double-extortion method. This tactic involves both encrypting a victim's systems and threatening to publish stolen data to increase pressure on the target. The publication of such data can pave the way for secondary risks, including identity theft and highly targeted phishing attacks against the company or its employees.

Ultimately, such leaks can negatively impact the financial and operational continuity of the organization. In the food and agriculture sector, maintaining the integrity of proprietary recipes and financial records is critical for business stability. Organizations in this sector often face risks where the loss of intellectual property can disrupt their market position and long-term growth.

General context on ransomware and data breaches

Ransomware attacks have become a prevalent threat to various industries. When a group utilizes double extortion, the goal is to maximize leverage over the victim by threatening the release of sensitive information. This creates a dual crisis: the immediate disruption caused by system encryption and the long-term reputational and legal damage caused by data exposure.

To defend against such threats, organizations typically focus on strengthening their perimeter defenses, implementing robust access controls, and maintaining comprehensive monitoring of their internal networks. Regular security audits and employee training are also common defensive measures used to mitigate the risk of unauthorized access and subsequent data exfiltration.