The group claims to have breached data from Sysco, compromising over 61 million Salesforce records across several tables. The compromised data contains customer data/PII, employee data, and other internal corporate data. They intend to publish the data within 3 days. NB: The organization had previously fallen victim to the Dunghill Leak ransomware on 9 May 2023 and to Qilin ransomware on 6 May 2026.