Ransomware Group: AKIRA

VICTIM NAME: Machu PicchuFoods

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the AKIRA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to Machu Picchu Foods, a company operating within the Agriculture and Food Production sector in Peru. The breach was discovered on April 21, 2025. The leaked data allegedly includes sensitive corporate documents such as financial reports, audit files, contact information for employees and customers, and various legal agreements. The attackers have provided a magnet link enabling interested parties to download the compromised data using torrent clients; notably, the archives are indicated to be password-free, facilitating easier access. This leak could potentially expose confidential business information, which might impact the company’s operational security and customer trust.

The leaked content reportedly includes internal documents and data related to the company’s operations as a cacao ingredient and chocolate supplier, as well as a contract manufacturer for private labels. The leak may also include screenshots of internal information, although none are explicitly shown or described. The threat actors have emphasized the availability of the downloaded data, despite no direct links or detailed specifics being provided publicly. The incident highlights the importance of cybersecurity measures within the food production industry, especially for companies handling sensitive corporate and client data. No personally identifiable information or specific employee details are publicly available beyond the general nature of the compromised data.