Nor-Cal Beverage Co., Inc.

Nor-Cal Beverage Co., Inc. suffered a ransomware attack between February 3–4, 2023, leading to a data breach that exposed personal information, including names and potentially other unspecified sensitive details. The incident was formally reported to the California Office of the Attorney General on March 7, 2023. The breach highlights the company’s vulnerability to cyber extortion, where threat actors likely encrypted critical systems and exfiltrated data before demanding payment. While the exact scope of compromised data remains undisclosed, the inclusion of personal identifiers suggests risks of identity theft, phishing, or financial fraud for affected individuals. The attack disrupts operational trust and may incur regulatory penalties, reputational harm, and financial losses tied to incident response, legal liabilities, and potential ransom negotiations. Given the nature of ransomware—combining data encryption and exfiltration—the incident underscores systemic weaknesses in cybersecurity defenses, particularly against advanced persistent threats (APTs) or opportunistic cybercriminal groups. Recovery efforts likely involve forensic investigations, data restoration from backups (if available), and enhanced security measures to prevent recurrence.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-564028

TPRM report: https://www.rankiteo.com/company/nor-cal-beverage

"id": "nor224090625",
"linkid": "nor-cal-beverage",
"type": "Ransomware",
"date": "2/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'beverage',
                        'location': 'California, USA',
                        'name': 'Nor-Cal Beverage Co., Inc.',
                        'type': 'company'}],
 'data_breach': {'personally_identifiable_information': ['names'],
                 'type_of_data_compromised': ['personal information']},
 'date_detected': '2023-02-03',
 'date_publicly_disclosed': '2023-03-07',
 'description': 'The California Office of the Attorney General reported that '
                'Nor-Cal Beverage Co., Inc. experienced a data breach due to a '
                'ransomware infection that occurred between February 3, 2023, '
                'and February 4, 2023. The breach may have impacted personal '
                'information, including names and possibly other unspecified '
                'information.',
 'impact': {'data_compromised': ['names', 'unspecified personal information']},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Nor-Cal Beverage Co., Inc. Ransomware Data Breach (2023)',
 'type': 'ransomware'}