American Vanguard Listed by osiris Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
American Vanguard was listed by the osiris ransomware group on January 09, 2026, after internal files were exfiltrated in a ransomware attack. The number of people affected has not been disclosed; anyone connected to the organization should verify their status and take protective steps.
American Vanguard, a California-based agricultural chemicals company, was listed by the osiris ransomware group on January 9, 2026. The listing states that internal files were exfiltrated during a ransomware attack. The number of individuals whose information may be involved remains unknown, and no further details on the volume or contents of the data have been made public.
The incident is significant because American Vanguard operates in the crop-protection sector, where organizations routinely handle proprietary research, regulatory submissions, and commercial records that can affect supply chains and environmental compliance.
What happened
Public reporting indicates that American Vanguard was added to a listing maintained by the osiris group on January 9, 2026. The entry asserts that internal files were removed from the company’s systems in the course of a ransomware operation. No confirmed figure for the number of people affected has been released, and the company has not issued a statement detailing the timeline, method of entry, or scope of the intrusion.
The group behind it: osiris
Osiris is a ransomware operation that maintains a public leak site where it lists organizations it claims to have targeted. Groups of this type typically combine encryption of systems with the removal of data, then pressure victims by threatening to publish the material. The listing of American Vanguard constitutes the group’s claim of involvement; independent confirmation of the claimed access has not been provided in the available facts.
Who is American Vanguard?
American Vanguard Corporation, founded in 1969 and headquartered in Newport Beach, California, develops and markets crop-protection products including herbicides, insecticides, fungicides, and fumigants under the AMVAC brand and other labels. The company serves agricultural markets worldwide and conducts research and development alongside strategic acquisitions. Organizations in this sector maintain records related to product formulations, safety testing, regulatory filings, and customer transactions.
The information in question
The listing refers to “internal files exfiltrated in ransomware attack.” No inventory of specific data categories has been disclosed. Companies of this type commonly store research data, regulatory submissions, employee records, supplier contracts, and financial information. The precise contents of the exfiltrated material therefore remain unconfirmed.
Why it matters
Exposure of internal files from an agricultural-chemicals firm can create operational and regulatory complications, particularly where proprietary formulations or compliance documentation are concerned. For individuals whose personal or employment data may be included, the main practical risks are identity misuse or targeted fraud. The absence of a confirmed count of affected people means the full extent of personal exposure cannot yet be assessed.
Were you affected?
Individuals who have conducted business with American Vanguard or its brands can monitor official statements from the company and any required regulatory notifications. A practical first step is to review recent account activity and consider placing fraud alerts with credit-reporting agencies if personal identifiers were potentially involved. Readers may also run a free exposure scan of their email address against known breach data sets to check for prior appearances in public listings.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Gold Standard Automotive Listed by Wallstreet Ransomware GroupX-Copper Professional Listed by moneymessage Ransomware GroupFluke Corporation Listed by shinyhunters Ransomware Groupprintronix.com Listed by BrainCipher Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the American Vanguard Listed by osiris Ransomware Group →
Publicly posted by osiris — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.