Powered by MOMENTUMMEDIA
For breaking news and daily updates, subscribe to our newsletter

Exclusive: NZ poultry producer allegedly hacked by Clop

A New Zealand poultry producer has allegedly suffered a ransomware attack after hackers listed the group on their dark web leak site.

Tue, 27 Jan 2026
Exclusive: NZ poultry producer allegedly hacked by Clop

Brinks NZ is a chicken and poultry producer that has been providing New Zealand with quality chicken for over 60 years.

The company was listed on the dark web leak site of the Clop ransomware gang, who viciously claimed that Brinks NZ ignored their security and allowed for the cyber attack to happen.

“The company doesn’t care about its customers, it ignored their security!!!,” the company wrote.

 
 

Other than its message, the threat group disclosed no details of the alleged cyber incident, only stating that the company had an annual revenue of $6.2 million.

Cyber Daily has reached out to Brinks NZ for commentary on the incident and is yet to receive a response.

Who is Clop?

Clop was first observed in 2020, and has been a prolific threat actor since.

Late last year, Clop performed an extortion campaign through which it targeted a large number of businesses.

Cyber security firm Mandiant first began warning of a “high volume” extortion campaign linked to Cl0p in early October, after it was revealed that the hackers had been emailing executives to pressure them to pay ransoms or have their data published.

“Mandiant and Google Threat Intelligence Group are actively tracking recent activity involving an actor claiming affiliation with the Cl0p extortion group,” Charles Carmakal, CTO at Mandiant – Google Cloud, said in October.

“We are currently observing a high-volume email campaign being launched from hundreds of compromised accounts, and our initial analysis confirms that at least one of these accounts has been previously associated with activity from FIN11, a long-running, financially motivated threat group known for deploying ransomware and engaging in extortion.

“The malicious emails contain contact information, and we’ve verified that the two specific contact addresses provided are also publicly listed on the Cl0p data leak site (DLS),” Carmakal said.

To date, Clop reportedly has 1,172 victims.

Daniel Croft

Daniel Croft

Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.
Tags:
You need to be a member to post comments. Become a member for free today!