Monterey Mushrooms LLC, the largest fresh mushroom producer in the U.S., suffered a ransomware attack by the INC RANSOM group between August 2–7, 2025. The breach exposed personally identifiable information (PII), including names, driver’s license numbers, passport numbers, and Social Security numbers, posing a high risk of identity theft and fraud. The stolen data was later posted on a dark web leak site (Sept. 5, 2025). While the total number of affected individuals remains undisclosed, the company notified victims via mail and reported the incident to the California Attorney General’s office (Sept. 18, 2025). Monterey Mushrooms secured its IT systems, involved law enforcement, and offered free identity protection services (Epiq Privacy Solutions) to impacted individuals. The breach’s severity stems from the sensitive nature of the leaked data and the potential for widespread financial and reputational harm to victims.
Source: https://www.claimdepot.com/data-breach/monterey-mushrooms-2025
TPRM report: https://www.rankiteo.com/company/monterey-mushrooms
"id": "mon5902759091925",
"linkid": "monterey-mushrooms",
"type": "Ransomware",
"date": "8/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'industry': 'Agriculture/Food Production',
'location': 'United States',
'name': 'Monterey Mushrooms LLC',
'size': 'Large (largest producer of fresh mushrooms in '
'the U.S.)',
'type': 'Private Company'}],
'customer_advisories': ['Direct mail notifications with steps to mitigate '
'risks (e.g., identity protection enrollment, credit '
'monitoring).'],
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': ['Names',
"Driver's License "
'Numbers',
'Passport Numbers',
'Social Security '
'Numbers'],
'sensitivity_of_data': "High (includes SSNs, driver's license "
'numbers, passport numbers)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_publicly_disclosed': '2025-09-05',
'description': 'Monterey Mushrooms LLC, the largest producer of fresh '
'mushrooms in the United States, experienced a major data '
'breach where a cybercriminal gained unauthorized access to '
'files containing sensitive personally identifiable '
'information (PII) between August 2 and August 7, 2025. The '
'ransomware group INC RANSOM claimed responsibility and leaked '
'the data on their dark web site on September 5, 2025. Exposed '
"data included names, driver's license numbers, passport "
'numbers, and Social Security numbers, posing a high risk of '
'identity theft and fraud.',
'impact': {'brand_reputation_impact': 'High (due to exposure of sensitive PII '
'and potential identity theft risks)',
'data_compromised': ['Personally Identifiable Information (PII)',
'Names',
"Driver's License Numbers",
'Passport Numbers',
'Social Security Numbers'],
'identity_theft_risk': 'High'},
'initial_access_broker': {'data_sold_on_dark_web': True,
'high_value_targets': ['PII databases']},
'investigation_status': 'Ongoing (notifications sent, identity protection '
'services offered)',
'motivation': ['Financial Gain', 'Data Theft'],
'post_incident_analysis': {'corrective_actions': ['Secured IT network',
'Partnered with Epiq '
'Privacy Solutions for '
'identity protection']},
'ransomware': {'data_exfiltration': True},
'recommendations': ['Sign up for the free identity protection services '
'provided by Monterey Mushrooms (Epiq Privacy Solutions).',
'Monitor credit reports and financial accounts for '
'unusual activity.',
'Be alert for phishing emails or calls exploiting exposed '
'information.',
'Consider placing a fraud alert or credit freeze with '
'major credit bureaus.'],
'references': [{'source': 'Monterey Mushrooms Official Site'},
{'date_accessed': '2025-09-05',
'source': 'INC RANSOM Dark Web Leak Site'},
{'date_accessed': '2025-09-18',
'source': "California Attorney General's Office Disclosure"}],
'regulatory_compliance': {'regulatory_notifications': ['California Attorney '
"General's office "
'(disclosed on '
'2025-09-18)']},
'response': {'communication_strategy': ['Direct mail notifications to '
'affected individuals',
'Disclosure to California Attorney '
"General's office"],
'containment_measures': ['Secured IT network'],
'incident_response_plan_activated': True,
'law_enforcement_notified': True,
'recovery_measures': ['Notifying impacted individuals via mail',
'Offering free 1-year identity protection '
'services (Epiq Privacy Solutions)'],
'third_party_assistance': ['Epiq Privacy Solutions (ID '
'protection services)']},
'threat_actor': 'INC RANSOM',
'title': 'Monterey Mushrooms LLC Data Breach (2025)',
'type': ['Data Breach', 'Ransomware Attack']}