ransomware Credible South Africa (ZA) food

Sunspray Food Ingredients listed by the The Gentlemen ransomware group

Sunspray Food Ingredients

📅 26 March 2026
CompanySunspray Food Ingredients
CountrySouth Africa (ZA)
Sectorfood
Breach date2026-03-26
People affectedNot disclosed
Ransomware groupthegentlemen
Data typescorporate records, client data, financial documents

Overview

The Gentlemen ransomware group has listed Sunspray Food Ingredients, a South African manufacturer of spray-dried food ingredients, on its leak site. Founded in 1944 and headquartered in Johannesburg, the company is the country's largest independent producer in its segment, operating 10 spray dryers across two facilities. The listing appeared on 26 March 2026.

What was published

The group claims to have exfiltrated corporate data from the manufacturer. The archive is expected to include client contracts, production records, financial documents and employee files.

Risks for affected individuals

  • Employees' personal records may be exposed.
  • Client and formulation data could be of commercial value.
  • Financial information may enable fraud attempts.

What remains unknown

  • The volume of data stolen.
  • Whether the data has been published.
  • The timeline of any release.

What affected people should do

Employees should update credentials and watch for phishing referencing the company. Sunspray should notify staff and partners, engage cybersecurity experts, and coordinate with South African authorities on the response.