Ransomware group Dark Project hits Homestead Creamery
Homestead Creamery — a agriculture and food production target operating in US has been listed by the Dark Project ransomware group on 2026-11-04. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Homestead Creamery |
|---|---|
| Threat Group | Dark Project |
| Summary | Homestead Creamery, a agriculture and food production organization in the United States, was listed by the Dark Project ransomware group on its leak site on 2026-11-04. |
| Date of Breach | 2026-11-04 |
| Discovery Date | 2026-11-04 |
| Region | US |
| Target Domain | www.homesteadcreameryinc.com |
| Business Sector | Agriculture and Food Production |
| Severity | MEDIUM |
Claim by Dark Project
About Homestead Creamery Homestead Creamery specializes in premium dairy products made from milk sourced from local A2A2 cows. They offer minimally pasteurized milk, rich ice cream, and all-natural lemonade, all crafted to preserve flavor and quality. Their products are available in returnable glass bottles and can be found in various stores. The company aims to provide delicious, wholesome dairy options for consumers who appreciate quality and taste. As a result of the attack on Company Homestead Creamery, more than 70 GB of confidential data was stolen. More than 120,000 files were not secured by Company and contain data such as banking and other financial information, as well as employees' personal data.
Posted by the Dark Project threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
www.homesteadcreameryinc.com
Leak post (onion / Tor)
http://darkprn3d3udnhpuxknsrhft3376lrz5tenhgkrxge5hxqe46pkbrwid.onion/article?slug=homestead-creamery
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

