Soja de Portugal
thegentlemenThis record tracks a ransomware attack claimed by the thegentlemen group against Soja de Portugal. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
***.pt ***.com/c/soja-de-portugal/458493209 491GB leaked from there as a result of this breach. What kind of data leaked: - SAP data - contacts - contracts - planning - logistics - projects data - personal data - employee data - partners data - customers data - financial data - correspondence - production data - quality control data - offers and proposals - data related to Sorgal, Avicasal, Savinor and other brands - other sensitive business data Instead of negotiations, threats were made and the leaked data was not even reported to anyone here is the text they wrote https://***.as/***.md
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.