Evian, Silk Maker Danone Targeted in Major Ransomware Attack

Danone Hit by Qilin Ransomware Attack as Hackers Claim Theft of Sensitive Company Data

• Danone Hit by Qilin Ransomware as Hackers Claim Massive Data Theft
• Hackers Claim They Stole Sensitive Data From Global Food Giant Danone
• Qilin Ransomware Gang Targets Danone, Threatens to Leak Company Files
• Global Food Giant Danone Faces Cyberattack as Ransomware Gang Makes Bold Claims
• Danone Joins Growing List of Major Companies Targeted by Qilin Hackers

Global food giant Danone, the company behind household brands including Evian, Silk, and International Delight, has reportedly become the latest victim of the notorious Qilin ransomware gang, with cybercriminals claiming they stole thousands of confidential company files.

The ransomware group has listed Danone on its dark web leak site, alleging it exfiltrated a large cache of sensitive corporate information before launching the attack. The claims have not been independently verified, and Danone has not publicly confirmed the extent of any data theft.

Hackers Claim They Stole Financial and Customer Data

According to the threat actors, the stolen data includes financial records, customer information, internal corporate documents, contracts, and thousands of company files.

As with many modern ransomware operations, the attackers are using a double-extortion strategy—stealing data before encrypting systems and then threatening to publish the information unless a ransom is paid. Cybersecurity experts note that this approach has become one of the most effective tactics used by ransomware groups to pressure victims.

One of the World’s Largest Food Companies Under Pressure

Danone is one of the world’s leading food and beverage companies, with operations spanning more than 120 countries and a portfolio of globally recognized brands.

A successful cyberattack on a company of this scale could have implications beyond corporate systems, potentially affecting suppliers, business partners, customer services, and internal operations. At the time of reporting, there has been no public indication of widespread disruption to consumer products or manufacturing.

Qilin Continues Its Global Ransomware Campaign

The incident is the latest in a series of attacks attributed to the Qilin ransomware group, one of the most active cybercriminal organizations operating today.

Security researchers say the group primarily targets large organizations across manufacturing, healthcare, technology, retail, and critical infrastructure. Qilin has built a reputation for stealing sensitive data before encrypting networks, increasing pressure on victims through public leak threats.

Investigation Ongoing

Danone is expected to investigate the incident with cybersecurity specialists to determine whether company systems were compromised and whether any customer or employee information was affected.

As investigations continue, cybersecurity experts warn that attacks against multinational corporations are becoming increasingly frequent, with ransomware groups focusing on high-profile brands that possess valuable financial and operational data.

The Danone incident serves as another reminder that even some of the world’s largest consumer goods companies remain attractive targets for increasingly sophisticated cybercriminals.