KP Snacks, a large manufacturer of popular snacks, has been targeted by the Conti ransomware gang, affecting product distribution to leading supermarkets.
Kenyon Produce (KP) Snacks is behind popular snack brands, such as PopChips, Skips, Hula Hoops, Penn State pretzel, McCoy's, Wheat Crunchies, etc.
See also: Apple and Tesla supplier hit by ransomware
The company has more than 2,000 employees and its revenue is estimated to be in the hundreds of millions of dollars, making it an attractive target for threat actors.
Due to the ransomware attack by the Conti group, product deliveries from KP Snacks to leading supermarkets appear to be delayed or canceled altogether. According to discussions between KP Snacks and its partner supermarkets, the supply shortage problems may last until the end of March.
The attackers are said to have gained access to internal systems and encrypted important files, including employee records and financial documents.
BleepingComputer saw a private leak page, which showed that the Conti ransomware group claims responsibility for the attack on KP Snacks.
See also: Group linked to Memento ransomware uses new PowerShell backdoor
The attackers shared sample credit card statements, birth certificates, spreadsheets with employee addresses and phone numbers, confidential agreements, and other sensitive documents.
We do not know if KP Snacks is in negotiations with Conti or if it will pay a ransom.
“On Friday, January 28th, we became aware that we were unfortunately the victims of a ransomware incident,” a KP Snacks spokesperson told BleepingComputer. The spokesperson said the company immediately implemented its incident response plan and hired specialist investigators and legal counsel to assist in the investigation.
The company's internal IT teams are working with third-party security experts to assess the situation.
See also: Nordic Choice hotels hit by Conti ransomware
Also, in its statement, the company said that it is keeping its colleagues, customers and suppliers informed of any developments, while apologizing for the disruption this situation has caused.
Conti ransomware
Conti ransomware often targets large organizations and companies. Last month, the gang claimed responsibility for the attack on Bank Indonesia, the country's central bank, and began leaking its data.
In December 2021, Conti breached the systems of hotel group Nordic Choice. Other recent victims include Ireland's Department of Health (DoH) and Health Service Executive (HSE) and RR Donnelly (RRD).
Source: Bleeping Computer
