CJ Selecta S/A Listed by avaddon Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
The CJ Selecta S/A Listed by avaddon Ransomware Group (reported September 9, 2021) is an unverified claim; the data involved is undisclosed belonging to roughly unknown people. If you have an account with them, your information may now be circulating on the open web and with data brokers. Here’s exactly what happened, how to check if you were affected, and what to do next.
On September 9, 2021, the ransomware group Avaddon listed CJ Selecta S/A on its data-leak site. The listing states that internal files were taken during a ransomware operation, though the number of people affected and the precise contents of those files remain undisclosed.
The incident matters because any exposure of internal records from an organisation that handles commercial, operational and potentially personal information can create downstream risks for individuals and business partners even when the full scope is still unknown.
Breaking down the breach
The only confirmed public detail is the appearance of CJ Selecta S/A on Avaddon’s leak site on the reported date. The group claims to have exfiltrated internal files during a ransomware attack. No information has been released about the date of the intrusion itself, the volume of data taken, or whether any material was later published. The number of individuals whose information may be involved is not stated.
Inside avaddon
Avaddon is a ransomware operation that has used double-extortion tactics: encrypting systems and also copying data before demanding payment. Like several similar groups, it maintained a leak site where it listed organisations it claimed to have compromised, publishing samples or directories to increase pressure on victims. Such listings constitute the group’s own assertions and are not independently verified unless additional evidence emerges.
About CJ Selecta S/A
CJ Selecta S/A operates in the agribusiness sector, processing soy and related commodities. Organisations of this type routinely maintain records that include supplier and customer details, employee information, financial documentation and operational data. A breach that exposes such material can affect both the company’s commercial relationships and any individuals whose personal information is held in those systems.
The information in question
The listing refers only to “internal files.” No inventory of specific data types has been made public. Companies in this sector commonly store contact details, employment records, contracts and transaction histories, but it is not confirmed whether any of these categories were among the material taken. The exact contents therefore remain unconfirmed.
The real-world impact
Exposed internal files can lead to follow-on fraud attempts, phishing campaigns or misuse of personal details if names, addresses or financial references are present. For the organisation, the incident adds costs related to investigation, potential regulatory reporting and remediation. Because the scale and sensitivity of the data are still unknown, the full extent of consequences for individuals cannot yet be measured.
If your data was in this claimed breach
Individuals who believe their information may have been involved should monitor bank and email accounts for unusual activity and consider changing passwords on any services linked to the organisation. Enabling multi-factor authentication where available reduces the value of stolen credentials. Readers can also run a free exposure scan of their email address against known breach data to check for appearances in public listings.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
360 InStore Listed by avaddon Ransomware GroupNIJMAN / ZEETANK International Transport Sp. z o. o. Listed by avaddon Ransomware GroupImperial Printing and Paper Box Mfg Listed by avaddon Ransomware GroupJohann Kupp GmbH & Co. KG Listed by avaddon Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the CJ Selecta S/A Listed by avaddon Ransomware Group →
Publicly posted by avaddon — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.