Kasapreko PLC listed by the Qilin ransomware group

Overview

The Qilin ransomware group has listed Kasapreko PLC, Ghana's leading herbal beverage manufacturer, on its leak site. Founded in 1989, the company employs over 500 people and exports to 16 countries. This listing, dated 6 December 2025, is a separate incident from the one claimed by The Gentlemen group in May 2026. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated corporate data from the manufacturer. The archive is expected to include commercial contracts, supplier records and financial documents.

Risks for affected individuals

• Business partners could be targeted using contract data.
• Financial records may facilitate fraud.
• Employees' personal information may be part of the archive.

What remains unknown

• The volume of data stolen.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Business partners should verify payment requests through direct contact with the company. Kasapreko should notify partners and staff, review the affected systems, and report the incident to Ghanaian authorities.