R&K Drysdales Listed by Sarcoma Ransomware Group

On March 26, 2025, the Scottish agricultural cooperative East of Scotland Growers and its associated company R&K Drysdales appeared on the leak site of the sarcoma ransomware group. Internal files were allegedly exfiltrated during a ransomware attack, exposing data that could affect anyone whose personal or financial information was held by the cooperative.

What Public Reporting Shows

Public reporting indicates that East of Scotland Growers, a farmer-owned cooperative based in Cupar, Fife, was established in 1987 to help individual growers operate collectively. The group grows broccoli, Brussels sprouts, cauliflower and other vegetables across a 180-mile radius in eastern Scotland. It is officially recognised by the European Union as a Producer Organisation. Available reporting describes the incident as a ransomware attack in which attackers exfiltrated internal files before listing R&K Drysdales on the sarcoma leak site. The exact number of people affected remains unknown, and the specific types of records exposed have not been fully detailed in public leaks.

Why This Matters for You and Your Family

When a local agricultural cooperative suffers a breach, the consequences reach far beyond the farm gate. Suppliers, customers, employees and their families may have had addresses, phone numbers, bank details or tax information stored in the compromised systems. Once that data leaves the company’s control, it can be sold, traded or used to target you directly. Criminals do not distinguish between a farmer’s records and any other household’s data. If your information was included, you and your family are now at higher risk of identity theft, fraudulent loan applications and unwanted contact from people who should never have had your details.

The Doxxing and Identity-Chain Implications

A single breach rarely stays isolated. Attackers frequently combine newly stolen data with information from earlier leaks to build detailed profiles. An email address taken from this incident can be linked to your social-media accounts, children’s gaming usernames or family phone numbers. These connections create an identity chain that makes doxxing easier and account takeovers more likely. Credential leaks of this kind often cascade into gaming platforms, where children’s accounts become entry points for further harassment or extortion. Public reporting shows that ransomware operators increasingly exploit these chains to pressure victims or sell the mapped data on underground forums.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles and real-world identity, then complete the cleanup of exposed records.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is detected and acted on within hours rather than months.
• Rotate any password you used with East of Scotland Growers or R&K Drysdales wherever it has been reused, and switch on two-factor authentication through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that can chain back to the same address or parent credentials.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate with threat actors yourself.

The sarcoma group’s appearance on this incident fits a pattern of targeting organisations whose data can be weaponised against ordinary people. While the immediate breach cannot be undone, swift personal action limits how far the stolen information can travel. Start by understanding exactly what chains exist from this leak to the rest of your digital life. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Taking these steps now protects your family from the next stage of this claimed breach and from future incidents that have not yet made headlines.