Skip to content
Leak-site post naming ADM, captured by ThreatCluster
Back to victims

ADM

qilin

Ransomware leak-site victim intelligence · EN

Views
4,263
Posted
Sep 15, 2026
Country
US
Industry
Food & Beverage

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot, our reporting

Qilin claims that ADM (www.adm.com) in the Food & Beverage sector was the victim, and the leak post includes a TOX value associated with the incident. The leak page identifies ADM by domain and sector and lists the publication status as published on 2026-09-15. ThreatCluster’s news reporting notes this incident as part of a broader wave of ransomware attacks reported on 2026-09-15, with other victims named in coverage.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
adm.com

What was taken

ADM

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring a green leaf design above the letters "ADM" in dark blue.
onion leak page16 KB

Negotiation
Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion