HackerFeeds
All ransomware incidents
elordeno.com

Ransomware group thegentlemen hits El Ordeno

MEDIUM
·Agriculture and Food Production·EC·2026-04-15

El Ordeno — a agriculture and food production target operating in EC has been listed by the thegentlemen ransomware group on 2026-04-15. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.

Incident Report

Target OrganizationEl Ordeno
Threat Group
thegentlemen
Summaryelordeno.com zoominfo.com/c/el-ordeño/363579816 El Ordeño (Sociedad Industrial Ganadera El Ordeño S.A.) is an Ecuadorian agro-industrial dairy company founded in 2001, headquartered in Quito, Pichincha Province. It operates an inclusive and associative business model that connects over 6,000 small and medium dairy producers across 100+ collection centers in the Ecuadorian highlands and Amazon. In 2019, it became the first certified B Corporation dairy company in Ecuador, Latin America, and the Caribbean
Date of Breach2026-04-15
Discovery Date2026-04-19
RegionEC
Target Domainelordeno.com
Business SectorAgriculture and Food Production
Severity
MEDIUM

Claim by thegentlemen

elordeno.com zoominfo.com/c/el-ordeño/363579816 El Ordeño (Sociedad Industrial Ganadera El Ordeño S.A.) is an Ecuadorian agro-industrial dairy company founded in 2001, headquartered in Quito, Pichincha Province. It operates an inclusive and associative business model that connects over 6,000 small and medium dairy producers across 100+ collection centers in the Ecuadorian highlands and Amazon. In 2019, it became the first certified B Corporation dairy company in Ecuador, Latin America, and the Caribbean

Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.

Disclaimer

HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.