Skip to content
Leak-site post naming Fresh Farms, captured by ThreatCluster

Fresh Farms

pear

Ransomware leak-site victim intelligence · EN

Data size
1 Tb
Posted
Oct 23, 2026
Country
USA
Industry
Agriculture

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

pear states they exfiltrated 1 TB of data from Fresh Farms, including financials, HR, business operations data, partner and vendor data, client and customer details, mailboxes and email correspondence, and databases. The leak page identifies the victim as Fresh Farms (domain freshfarms.com.mx), a USA-based agriculture company with revenue of $380 million. The leak is currently listed on the group's site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
freshfarms.com.mx

What was taken

Offers a wide range of top-quality products that meet the needs of customers in the foodservice, retail, and industrial sectors, including export markets

Data categories
FinancialsHRBusiness OperationsPartners’ & Vendors’ DataClients’ & Customers’ DetailsMailboxes & Email CorrespondenceDatabase
Leak site tags
ANNOUNCED

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "Fresh Farms" in green and orange, with a sunburst background in yellow and green.
onion leak page121 KB

Negotiation

Tox 457BB4E5DF0E650509322CA894758D925A568828090A3449D5AEEED30E9B8E18DDDFF71909ED