Agromart Group

Agromart Group is also known by the alias Agromart. The organization operates as an agricultural services provider. Its headquarters are situated in Canada.

On May 1, 2020, Agromart Group was targeted by a ransomware attack. The attack was conducted by the threat group Sodinokibi, also known as REvil. The attackers exfiltrated accounting documents from the organization's systems. They also exfiltrated databases containing operational data. Internal communications were among the data taken during the breach. Following the exfiltration, the threat actors launched an auction for the stolen information. Participation in the auction required a $5,000 registration deposit. The auction established a minimum opening bid of $50,000 for the data lot. The threat actors publicly released unredacted internal emails from Agromart Group. The released emails described the victim's breach response efforts. The emails also contained details of internal operational discussions. Exposure of the accounting documents and databases created risks of corporate espionage. The compromised data posed a threat of intellectual property theft. Personnel records within the stolen information raised the potential for identity theft. By publishing the correspondence, the attackers sought to amplify reputational damage against Agromart Group.

The provided sources do not specify Agromart Group's ownership structure. No details about parent or subsidiary relationships are included in the available material. The sources also omit quantitative metrics such as employee count, revenue, or geographic reach beyond the Canadian headquarters. Consequently, any description of the organization's scale or market footprint would rely on information not present in the given context. The profile therefore focuses on the confirmed aspects of the organization's identity and the documented ransomware incident.