Ransomware Attack on Macphie Ltd: Vulnerabilities and Impact

Incident Date:

April 19, 2024

World map



Ransomware Attack on Macphie Ltd: Vulnerabilities and Impact


Macphie Limited




Stonehaven, Scotland

, Scotland

First Reported

April 19, 2024

Ransomware Attack on Macphie Ltd by Black Basta Group

Company Profile

Macphie Ltd is a distinguished family-owned manufacturer of food ingredients based in Stonehaven, Scotland. Established in 1928, the company has evolved into a key player in the food manufacturing sector, specializing in a variety of products including cake mixes, bread mixes, fillings, icings, and sauces. Macphie is recognized for its commitment to quality, holding a BRC Grade A accreditation, and employs approximately 310 individuals. The company's annual revenue stands at around $65.1 million.

As a leader in its industry, Macphie not only focuses on high-quality production but also on sustainability and community engagement, which are core to its business philosophy.

Attack Overview

The ransomware group Black Basta has recently claimed responsibility for an attack on Macphie Ltd. According to the details released, approximately 600GB of data was compromised. This data includes sensitive information such as accounts data, financial records, HR documents, and personal user folders.

The attack underscores the vulnerability of even well-established organizations in the manufacturing sector to sophisticated cyber threats.

Vulnerabilities and Impact

The company's significant data repositories and its integral role in the food supply chain make it an attractive target for ransomware groups like Black Basta. The company's extensive digital footprint and the valuable nature of its stored data increase its risk of being targeted by cybercriminals seeking financial gain through ransom demands.


Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.