Soja de Portugal

Soja de Portugal was compromised in a ransomware attack attributed to THEGENTLEMEN in June 2026. The organization, operating in the Agriculture and Food Production sector in Portugal, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

sojadeportugal.pt zoominfo.com/c/soja-de-portugal/458493209 We want to inform you that our group managed to breach and encrypt Liztex network.  398GB leaked from there as a result of this breach.  What kind of data leaked:  - SAP data  - contacts  - contracts  - planning  - logistics  - projects data  - personal data  - employee data  - medical data  - partners data  - customers data  - financial data  - correspondence  - production data  - quality control data  - offers and proposals  - subsidiary data  - other sensitive business data Instead of negotiations, threats were made and the leaked data was not even reported to anyone here is the text they wrote https://write.as/82ak8bffqy42t.md