Equatorial Coca-Cola Bottling: 1.7 TB dataset offered on a forum

<p>On 22 April 2026, the <strong>worldleaks</strong> ransomware group listed <strong>Equatorial Coca-Cola Bottling Company</strong> on its dedicated leak site in Cameroon, Equatorial Guinea. The group has exfiltrated data from the organisation, a retail company, before publishing the victim on its leak site.</p> <h2>What the source reveals</h2> <p>[AI generated] Equatorial Coca-Cola Bottling Company is a beverage manufacturer and distributor operating primarily in West and Central Africa, including countries such as Cameroon and Equatorial Guinea. It produces and distributes Coca-Cola branded soft drinks and related beverages under license from The Coca-Cola Company. The company operates within the non-alcoholic beverage industry, managing bottling plants and regional distribution networks across its operating territories.</p> <h2>Risks</h2> <ul> <li>Exposure of commercial contracts, supplier agreements, procurement data, and pricing structures</li> <li>Supply chain disruption if operational, logistics, or inventory management systems were encrypted</li> <li>Competitive intelligence loss if proprietary business data or trade secrets were published</li> <li>Employee personal data exposure including payroll records, tax identification, and banking details</li> <li>Permanent loss of data integrity if backups were also compromised or encrypted</li> <li>Regulatory and legal consequences depending on data protection laws in the affected jurisdictions</li> </ul> <h2>What remains unknown</h2> <ul> <li>the volume and specific data types exfiltrated from the organisation</li> <li>the date of the initial intrusion and the attack vector used</li> <li>whether the organisation engaged with the attackers or paid any ransom demand</li> </ul> <h2>Conclusion</h2> <p>Ransomware attacks on retail organisations can disrupt operations and expose sensitive data across supply chains. The affected organisation should conduct a thorough forensic investigation, notify relevant regulatory authorities, and communicate transparently with affected stakeholders. Organisations in Cameroon, Equatorial Guinea should review their ransomware preparedness, including offline backup verification and incident response testing.</p>