DelCampo Listed by Qilin Ransomware Group

On June 21, 2025, the qilin ransomware group added DelCampo to its public leak site, claiming that internal files had been exfiltrated from the family-owned fresh-produce company.

What Public Reporting Shows

Public reporting indicates that DelCampo, a vertically integrated grower with greenhouses in Sinaloa and Jalisco, Mexico, suffered a ransomware intrusion. The qilin group claims to have stolen internal company files and has posted a sample on its dark-web leak portal. No exact victim count or list of specific data types has been disclosed beyond the broad description of internal files. The listing appeared on the group’s onion site, which is tracked by ransomware-monitoring services such as ransomware.live.

Available reporting describes the incident as a classic ransomware double-extortion case: encryption of systems followed by threats to publish stolen data unless a ransom is paid. As of the publication date, DelCampo has not issued a public statement confirming the breach or detailing what customer, supplier, or employee information may have been inside the exfiltrated files.

Why This Matters for You and Your Family

When a company that supplies food to grocery stores and restaurants is breached, the information it holds often includes names, addresses, phone numbers, and payment details of everyday customers and vendors. If your family buys fresh produce from retailers that source from DelCampo, your contact information could be among the records now in attackers’ hands. Exposed personal data from supplier lists, employee rosters, or customer orders can be sold or used to launch further attacks against you directly.