Verano Holdings targeted by THE SEVEN DEADLY SINS in alleged data breach

• Ransomware group: THE SEVEN DEADLY SINS
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: October 16, 2026

The threat group THE SEVEN DEADLY SINS claims a massive data breach at Verano Holdings

The threat actor known as THE SEVEN DEADLY SINS has published a claim regarding Verano Holdings on their leak site. According to the announcement made on October 16, 2026, the group alleges that a significant amount of data has been compromised. Specifically, the group claims to have exfiltrated over 2.4 million rows of data from the organization.

This type of announcement is a common tactic used by modern ransomware groups. These actors often utilize leak sites to host claims of successful intrusions, aiming to pressure organizations into meeting their demands. This method is frequently associated with a double-extortion strategy, where the attackers not only encrypt a company's systems but also threaten to release sensitive information publicly to maximize their leverage.

Details of the alleged data theft

The announcement by THE SEVEN DEADLY SINS specifies that the breach may have impacted critical systems, specifically mentioning that the company's Sweed POS and loyalty program data may have been affected. While the total size of the data exfiltration was not specified in the announcement, the group highlighted the volume of records involved.

The specific types of information claimed to be compromised include:

• Customer emails and phone numbers
• Loyalty program data
• Employee discount logs
• Invoice history
• State IDs
• Sweed POS data
• Cannabis compliance records

The inclusion of sensitive identifiers like state IDs and compliance records suggests a high level of sensitivity regarding the stolen information. Such data, if authentic, can be highly valuable to malicious actors for various illicit purposes.

About Verano Holdings

Verano Holdings is a publicly traded cannabis company operating in the United States. The organization maintains a significant presence in the market, operating retail dispensaries across more than 14 states. Its retail operations are conducted under the Zen Leaf and MÜV brand banners.

Potential implications and industry risks

This alleged data breach may increase the risk of identity theft and targeted phishing attacks for Verano Holdings' customers and employees. When personal identifiers such as emails, phone numbers, and state IDs are compromised, individuals become more vulnerable to social engineering tactics where attackers impersonate legitimate entities to gain further access or financial assets.

Furthermore, the compromise of Sweed POS data may introduce additional risks to supply chain security and could impact the company's operational integrity. In the retail sector, the security of Point of Sale (POS) systems is critical, as they serve as a primary interface for transactions and customer data collection.

From a regulatory perspective, legal consequences under various U.S. state data protection laws and industry-specific regulations could potentially arise following such an event. Organizations operating in highly regulated sectors, such as the cannabis industry, must adhere to strict compliance standards regarding data handling and reporting.

While public information regarding THE SEVEN DEADLY SINS is limited, their ransomware tactics suggest an intent to increase pressure on the organization through a double-extortion strategy. To defend against such threats, organizations typically focus on robust data encryption, multi-factor authentication, and continuous monitoring of their networks to detect unauthorized exfiltration attempts early in the attack lifecycle.