Ransomware Group: KAIROS

VICTIM NAME: usarice[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the KAIROS Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page for the victim organization, USA Rice, indicates a breach involving critical data associated with the agriculture and food production sector. The incident was discovered on March 3, 2025, and it highlights the exposure of sensitive information that could impact the organization’s operations in the United States. While the specific details of the data compromised remain unspecified, the leak page suggests a release of substantial data connected to the victim’s online presence, potentially including documents related to operational processes or customer information.

The information extracted from the accessible leak page reveals that multiple infostealers have been employed to gather data, with statistics indicating the use of tools such as Azorult and Lumma. In total, three users are reported to have been affected. Moreover, there appears to be visual evidence from a screenshot which likely illustrates sensitive content related to the breach. The presence of download links suggests that more detailed information is available for those accessing the leak page. However, specific identifiers or direct links have been omitted to prevent the dissemination of sensitive material.