GLOBALMalwareAgriculture & FoodRansomwareMedusaRansom DemandedActor NamedData Leak ThreatenedData PublishedHigh

Bimbo Bakeries

bd_3e04aa7a8518d426 · schema v1 · pii pii-v1

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Medusa on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: Agriculture and Food ProductionDiscovered: 2024-02-18

View aggregator listing on ransomware.live

Source: Ransomware.live

Post text · scraped from the leak site

Grupo Bimbo was founded in 1945. In 2002, the group was restructured and all companies were divided into four divisions: 1) Bimbo, S.A. unites the baking industry of Mexico and Central America; 2) Barcel, S.A. includes offices and sales in Botanas (small savory snacks) and Ricolino (chocolate); 3) Bimbo Bakeries USA (BBU) serves the US market; 4) Bimbo Canada serves the Canadian market 5) Organization Latinoamericana (OLA) serves the South American market. Grupo Bimbo has 105 enterprises in 18 countries in America, Europe and Asia. Their network is technically supported by DXC Technology, and network configuration was poor and vulnerable.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

No regulatory filing corroborates this yet. If an SEC 8-K, state-AG notice, or victim statement lands, DisclosureLens will merge it into an incident and link it here.

Source provenance

Source URL: https://www.ransomware.live/id/QmltYm8gQmFrZXJpZXNAbWVkdXNh
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 17, 2024
Raw hash: 2d633767a7d74c606a2f637bafc5d8724ca2a0191450c29d23a91879507355a9

Reporting entity

Name: medusa

Victim entity

Name: Bimbo Bakeries
norm: bimbo bakeries
Domain: grupobimbo.com.mx
Industry: Agriculture & Food

What this source establishes

Source ceiling: A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
Attack vector: Ransomware· medusa
Threat actor: MedusaExternalFinancial

Compliance

Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.