Back Redpacketsecurity [HELIX] – Ransomware Victim: Westrock Coffee
Verification alert Listings attributed to HELIX have been reported as including unverified or fabricated victim claims. Treat this post as unconfirmed until corroborated with independent evidence. See further information here: BankInfoSecurity
See further information here: BankInfoSecurity
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an editorial notice informing that a company has fallen victim to a ransomware attack. RedPacket Security is not affiliated with any ransomware threat actors or groups and will not host infringing content. The information on this page is automated and redacted whilst being scraped directly from the HELIX Onion Dark Web Tor Blog page.
AI Generated Summary of the Ransomware Leak Page
A leak-site post attributed to the Helix group names Westrock Coffee, a company categorized in the retail and e-commerce industry, and claims to hold company records. The post is dated October 21, 2026; no separate compromise date is provided, so this is the post date. The claim describes a potential data leak, but does not state that Westrock Coffee’s systems were encrypted or provide details the records allegedly obtained. The post cites yearly revenue of approximately $1.2 billion and says that GoFile download links and passwords will become available in 24 hours. No screenshots or other images are included in the available page content, and no specific ransom amount is stated. The claims have not been independently verified.
A leak-site post attributed to the Helix group names Westrock Coffee, a company categorized in the retail and e-commerce industry, and claims to hold company records. The post is dated October 21, 2026; no separate compromise date is provided, so this is the post date. The claim describes a potential data leak, but does not state that Westrock Coffee’s systems were encrypted or provide details the records allegedly obtained.
The post cites yearly revenue of approximately $1.2 billion and says that GoFile download links and passwords will become available in 24 hours. No screenshots or other images are included in the available page content, and no specific ransom amount is stated. The claims have not been independently verified.
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
