Black Basta claims ransomware attack on snack maker Carolina Foods

Carolina Foods, the Charlotte, North Carolina bakery that produces honey buns and other snack cakes under the Duchess brand, was named on the Black Basta ransomware group's dark web leak site in late March 2024.

The listing appeared on March 27, 2024, according to the tracking service Ransomware.live, which recorded the gang's claim that it had taken roughly 450 gigabytes of material from the company. Black Basta said the haul included company files, accounting records and employee personal information. No ransom figure was made public, and no samples were published that would let outside researchers confirm the scope of the theft.

Carolina Foods did not comment. Queen City News, which first reported the claim on March 29, 2024, said the company did not return requests for comment. Neither the company nor the reporting established whether production or distribution had been interrupted, and no state breach notification tied to the incident was identified.

Comparitech, which tracks ransomware claims, later counted Carolina Foods among Black Basta's 2024 attacks on food and beverage manufacturers, alongside incidents at companies in Canada and Germany. As of the reporting date, the only account of what was taken remained the attackers' own.