Skip to content
Leak-site post naming AGROFRUTO SAC, captured by ThreatCluster

AGROFRUTO SAC

arcusmedia

Ransomware leak-site victim intelligence

Posted
Sep 23, 2026
Countdown
EST SELL : 5 Days; EST LEAK : 7 Days
Country
Peru
Industry
Agroindustrial

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

The group states they have compromised data from AGROFRUTO SAC, a Peru-based agroindustrial exporter. The leak post is listed, with a countdown of EST SELL 5 Days and EST LEAK 7 Days. The leak page identifies AGROFRUTO SAC as the victim (domain agrofruto.pe; sector Agroindustrial; country Peru). The group describes themselves as a Peruvian company in the Agroindustrial sector, exporting frozen fruits to European, Asian and North American markets.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

People named
Fyodor Dostoevsky

What was taken

We are a Peruvian company in the Agroindustrial sector, dedicated to the expo …

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

author
Fyodor Dostoevsky
EST LEAK
7 Days
EST SELL
5 Days
NEW onion link
http://arcuufpr5xxbbkin4mlidt7itmr6znlppk63jbtkeguuhszmc5g7qdyd.onion/?cat=3
EST LEAK : 7 Days
7 Days
EST SELL : 5 Days
5 Days
published_at_label
September 23, 2026

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation

Onion arcuufpr5xxbbkin4mlidt7itmr6znlppk63jbtkeguuhszmc5g7qdyd.onion