Skip to content
Leak-site post naming Cal Fresh, captured by ThreatCluster

Cal Fresh

termite

Ransomware leak-site victim intelligence · EN

Views
4,614
Posted
Jun 9, 2026
Country
CA
Industry
Agriculture and Food Production

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

ThreatGroup termite claims CalFresh data tied to calfresh.ca.gov was taken; the leak page does not specify data types or the amount. The leak post is published, and ThreatCluster captured a screenshot. An onion URL is provided on the page for access to the materials.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
calfresh.ca.gov

What was taken

The California Association of Food Banks (CAFB) is committed to ending hunger in California and aims to provide clear, up-to-date information about CalFresh for people who are interested in applying. Since 2003, CAFB has partnered with food banks and other community-based organizations throughout the state to educate consumers about CalFresh and provide application assistance.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Extra info
http://y4bdg56uaznmbptf7dgp5xn3sjyyh4qodqjrsbziqatnyapmiqqctgid.onion/calfresh/

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture