Bimbo Bakeries
medusaThis record tracks a ransomware attack claimed by the medusa group against Bimbo Bakeries. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
Grupo Bimbo was founded in 1945. In 2002, the group was restructured and all companies were divided into four divisions: 1) Bimbo, S.A. unites the baking industry of Mexico and Central America; 2) Barcel, S.A. includes offices and sales in Botanas (small savory snacks) and Ricolino (chocolate); 3) Bimbo Bakeries USA (BBU) serves the US market; 4) Bimbo Canada serves the Canadian market 5) Organization Latinoamericana (OLA) serves the South American market. Grupo Bimbo has 105 enterprises in 18 countries in America, Europe and Asia. Their network is technically supported by DXC Technology, and network configuration was poor and vulnerable.
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.