goodcents.com Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People connected to goodcents.com may now face uncertainty about whether their personal or work-related information sits among files taken in a ransomware incident. When a company that supplies food outlets and manufactures frozen dough products is listed by a ransomware group, the practical concern is straightforward: internal records can contain employee details, supplier contacts, customer information, or operational data that outsiders should not hold. Public reporting so far leaves the number of people affected unknown and the precise contents of the files unconfirmed, which means anyone who has worked with, supplied, or been employed by the organisation has reason to treat the claim seriously and take basic protective steps.

On 5 June 2024 the organisation goodcents.com was listed by the qilin ransomware group. The listing asserts that internal files were exfiltrated during a ransomware attack. Beyond that claim, confirmed detail remains limited.

Breaking down the breach

Public records state that goodcents.com appeared on a qilin leak site on 5 June 2024. The group claims internal files were taken as part of a ransomware attack. No confirmed figure for the number of people affected has been released. The exact date the intrusion began, the method of initial access, the volume of data removed, and whether any ransom demand was paid or files later published are all undisclosed in the available summary. The only concrete description provided is that internal files were allegedly exfiltrated. Until the organisation or independent investigators release further verified information, the scale and full technical path of the incident remain unconfirmed.

Inside qilin

Qilin is a ransomware operation that has been active for several years and is widely documented as a ransomware-as-a-service group. It typically encrypts systems and simultaneously steals data, then threatens to publish the stolen material if payment is not made—a double-extortion model used by many contemporary ransomware crews. The group has previously targeted organisations across manufacturing, professional services, healthcare and other sectors in multiple countries. Listings on its leak site are claims made by the operators themselves; they are not independent confirmations that every asserted file set has been released or that every named victim suffered the full impact described. In this case the listing of goodcents.com is therefore treated as an unverified claim by the group rather than established fact.

Who is goodcents.com?

According to the reported summary, goodcents.com is associated with Goodcents, a United States operation linked to Custom Foods Inc. Custom Foods produces frozen dough and related products used by food outlets, including dough for pizza, bread, cookies and similar items. The company supplies commercial customers rather than operating solely as a consumer-facing brand. Organisations of this type routinely maintain records of employees, production schedules, supplier contracts, distribution partners and, in some cases, limited customer or franchisee data. A ransomware incident at a food-manufacturing and supply firm can therefore affect not only the company’s own workforce but also the businesses that rely on its products and the individuals whose details appear in those internal files.

The information in question

The only data type named in the available facts is “internal files exfiltrated in ransomware attack.” No further breakdown—such as whether the files contained employee Social Security numbers, payroll records, customer lists, financial documents or production formulas—has been publicly confirmed. Companies that manufacture and supply frozen dough typically hold personnel files, vendor contracts, shipping records and operational documents. Because the exact contents remain undisclosed, it is not possible to state with certainty which categories of information were taken. Anyone who has a past or present relationship with the organisation should assume that some personal or business data could be among the material claimed by the group until clearer inventories are released.

Why it matters

For individuals, the main risks are identity misuse, targeted phishing that references real internal details, and potential financial fraud if payment or tax information was included. For the organisation itself, the consequences can include operational disruption, regulatory scrutiny, loss of supplier or customer confidence, and the cost of forensic investigation and system recovery. Because the number of people affected is unknown and the precise data types are unconfirmed, the full scope of harm cannot yet be measured. Even limited internal files can give criminals enough context to craft convincing social-engineering attacks against employees or partners.

Were you affected?

If you have worked for, supplied, or done business with goodcents.com or Custom Foods Inc., treat the listing as a prompt to act rather than as proof that your own records were taken. Practical first steps include:

• Monitor bank and credit-card statements for unfamiliar activity and consider a free credit freeze or fraud alert with the major credit bureaus.
• Change passwords on any accounts that reused credentials linked to work email or systems, and enable multi-factor authentication wherever it is offered.
• Watch for phishing messages that mention the company, frozen-dough orders, or internal project names; verify unexpected requests by a second channel.
• Request any formal breach notification the organisation may later issue, and keep records of communications.

Readers can also run a free exposure scan of their email address to check whether that address has already appeared in other known breach data sets. Doing so provides an additional, independent signal while official details about this particular incident remain limited.

AICompiled with AI assistance from public sources and published under our editorial standards.