Tasteful Selections Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who work for or do business with Tasteful Selections may have personal or confidential information tied up in a ransomware incident that surfaced publicly in early December 2023. The number of individuals involved remains unknown, and independent confirmation of exactly what left the company’s systems is limited, yet the listing itself raises immediate practical questions about identity documents, employment records, and business relationships that could be misused if the material is real and later circulated.

Public detail is still thin. What is known comes largely from a claim posted by the ransomware group that says it took internal files. For anyone who has shared a Social Security number, passport copy, or contract with the firm, the prudent step is to treat the possibility of exposure seriously until clearer notice arrives from the company or regulators.

Breaking down the breach

On December 07, 2023, Tasteful Selections appeared on a leak site operated by the akira ransomware group. The group claimed it had exfiltrated internal files in a ransomware attack and stated that 410 Gb of data would be made available. No independent verification of the intrusion method, the precise date the systems were accessed, or the full scope of systems involved has been made public in the available record. The number of people affected is listed as unknown.

The only concrete description of the material comes from the group’s own posting, which asserted that the haul included personal information—specifically mentioning Social Security numbers and passports, mostly belonging to employees—along with confidential agreements and client information. Because these details originate from the threat actor’s claim rather than a confirmed disclosure by the company, they should be regarded as unverified until corroborated.

Who is akira?

Akira is a ransomware operation that emerged in early 2023 and has since been documented targeting organizations across multiple sectors, often in North America and Europe. Like many contemporary ransomware groups, it typically gains initial access through compromised credentials or vulnerable remote-access services, steals data before encrypting systems, and then pressures victims by threatening to publish the stolen files on a dedicated leak site.

The group’s public posts frequently list the victim’s name, a claimed data volume, and a short description of the content. Those listings are marketing and pressure tactics; they are not independent audits. In this case, akira’s claim that Tasteful Selections data would appear “soon” is simply that—a claim. No further confirmation that the files were actually released, or that the stated contents match reality, is contained in the available facts.

Who is Tasteful Selections?

Tasteful Selections is described as a joint venture of RPE, CSS Farms, and Plover River Farms Alliance, Inc. It operates as a vertically integrated grower, shipper, and marketer of premium specialty potatoes. Companies in this segment of the agricultural supply chain routinely manage employee records, grower and buyer contracts, logistics data, and quality or compliance documentation.

A breach at such an organization matters because the business sits at the intersection of farming operations, shipping, and commercial sales. Employee files can contain government identifiers and contact details; client and supplier files can contain pricing, volume commitments, and personal contact information for counterparties. Even when the exact contents of a theft remain unconfirmed, the ordinary data holdings of a firm like this create clear pathways for identity misuse or competitive harm if the material is genuine and later distributed.

The information in question

The available record states only that internal files were exfiltrated in a ransomware attack. The more specific inventory—410 Gb, Social Security numbers, passports (mostly employees), confidential agreements, and client information—comes solely from akira’s leak-site claim and has not been independently confirmed in the facts provided. Exact data types therefore remain unconfirmed.

Organizations of this kind typically hold payroll and human-resources files, government identification copies for employment eligibility, vendor and customer contracts, shipping and inventory records, and internal financial or operational documents. Whether any or all of those categories were actually taken in this incident is not established beyond the group’s assertion.

Why it matters

If the claimed personal information is accurate, employees face the ordinary but serious risks that follow exposure of Social Security numbers and passport data: fraudulent account opening, tax-refund fraud, and long-term identity monitoring burdens. Client and counterparty information, if real, could be used for business-email compromise or competitive intelligence. For the company itself, the incident creates operational, legal, and reputational costs regardless of whether a ransom was paid or the files were ultimately published.

Because the count of affected individuals is unknown and no official notification timeline is given in the public facts, people connected to Tasteful Selections cannot yet know whether they will receive formal notice. That uncertainty itself is a practical problem: it leaves individuals to decide how much defensive effort to invest without clear confirmation.

Were you affected?

If you are a current or former employee, contractor, or business partner of Tasteful Selections, consider the following immediate steps while waiting for any official communication:

• Monitor bank, credit-card, and tax accounts for unfamiliar activity and consider a fraud alert or credit freeze with the major credit bureaus.
• Treat unsolicited requests for personal or financial information with heightened caution, especially messages that reference the company or potato-industry business.
• If you previously supplied a passport copy or Social Security number for employment or contracting, note the date and keep records of any later official breach notification you receive.
• Run a free exposure scan of your email addresses to check whether they have already appeared in known breach datasets elsewhere; that will not confirm involvement in this incident but can reveal other exposures that need attention.

Public detail on this event remains limited to the December 07, 2023 listing and the group’s unverified description of the files. Continue to watch for statements from Tasteful Selections or from regulators; those sources, rather than the ransomware site, will be the reliable guide to whether your information was involved and what support may be offered.

AICompiled with AI assistance from public sources and published under our editorial standards.