RANSOMWARE VICTIMDUPLICATE CLAIM

VALLEREDONDO

morpheus📍 Spain (ES)📅 December 27, 2025
8
same group

Attack Intelligence

VALLEREDONDO was compromised in a ransomware attack attributed to morpheus in December 2025. The organization, operating in an undisclosed sector in Spain, was added to the group's data leak site as part of an extortion campaign.

morpheus operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Website: valleredondo.com.mx Revenue: $50 Million Family owned, founded in 1964 by Don Luis Ferruccio Cetto, right in the center of México, in Aguascalientes. With more than 60 years specialized in manufacturing, commercialization and distribution of different categories of beverages, Valle Redondo is consolidated as one of the Top producers, in Mexico and for many other countries, growing a robust portfolio of wines, spirits, ciders, juices, nectars, alternative and functional beverages and fruit concentrates. Data: Financial Documents Customer documents Business planning Employee records Legal documents HR Documents Logistics Marketing Projects The volume of retrieved data is 500 GB

Additional Details

Other Victims — morpheus (8)

Quick Facts

CountrySpain (ES)
Attack DateDec 27, 2025
Intel Sourceransomlook
StatusDUPLICATE CLAIM

Threat Group

morpheus
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.