AgroFair Benelux Falls Victim to Qilin Ransomware

🏢 About AgroFair Benelux

AgroFair Benelux BV, headquartered in Barendrecht, the Netherlands, is an importer and distributor of organic and Fairtrade tropical fresh fruit. The company sells products in Belgium, Denmark, the Netherlands, Finland, Italy, Austria, Switzerland, and the UK. AgroFair is owned by growers in Ghana, Ecuador, Costa Rica, Peru, Burkina Faso, and the Dominican Republic, sourcing directly from them or their organizations.

⚠ Disclaimer

This report includes actual screenshots and/or text that may contain unredacted personally identifiable information (PII) obtained from publicly available sources. Information is provided solely for cybersecurity awareness and threat intelligence purposes.

📌 Overview

On August 10, 2025, the Qilin ransomware group listed AgroFair Benelux on their Tor-based leak site. The threat actor claims to have obtained internal company data, including documents containing supplier personal and contact details. Qilin alleges that the data contradicts AgroFair’s certifications and could result in EU law violations.

📊 Key Details

Attribute	Information
Date	2025-08-10
Threat Actor	Qilin
Victim Country	🇳🇱 Netherlands
Industry	Agriculture & Farming
Victim Org.	AgroFair Benelux
Victim Site	agrofair.nl
Category	Ransomware
Severity	Medium
Network	Tor

📥 Breach Snapshot

Field	Details
Data Types Leaked	Supplier personal details, contact information, test results, internal spreadsheets
Estimated Records	Not disclosed
Public Statement	None
Leaked Screenshots	6 posted
Ransom Demand	Not disclosed

📡 Domain Reputation Summary

Check	Result
Domain	agrofair.nl
Registrar	Realtime Register
Country	🇳🇱 Netherlands
Nameservers	ns3.argewebhosting.nl, ns2.argewebhosting.com, ns1.argewebhosting.eu
Registered On	1999-06-25
SSL Certificate	Valid
VirusTotal Score	0/94 (clean)