Ransomware: qilin claims Carolina Agri-Power (US) — Agriculture and Food Production

A new ransomware incident has been publicly claimed by the Qilin group against Carolina Agri-Power, a US-based agricultural equipment and services provider. The claim was published on the ransomware.live leak site on 11 July 2026, under the BREACH framework. This is not a regulatory change but a confirmed data breach event that may trigger notification obligations under US state breach laws and, if EU personal data is involved, the GDPR.

Organizations in the agriculture, food production, and critical infrastructure sectors are directly affected by this incident, as it signals that ransomware groups continue to target supply chain and operational technology environments. Compliance teams should verify whether any shared data, third-party relationships, or cross-border data flows exist with Carolina Agri-Power or similar US-based agri-businesses. If EU personal data is implicated, a data breach notification to the relevant supervisory authority may be required within 72 hours.

Compliance teams should immediately review their incident response plans, ensure ransomware-specific playbooks are updated, and confirm that backup and recovery procedures are isolated from production networks. Additionally, assess whether your organization has any contractual or regulatory obligations to notify business partners or customers if their data is compromised. Proactive threat intelligence sharing with sector-specific ISACs is also recommended.