Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Leonard's Syrups

leonardssyrups.com

Leonard's Syrups was listed on the Cactus and BlackBasta leak site on Feb 26, 2024. Brandefense has recorded 2 separate claims against it. Information as of Oct 19, 2026.

Country: United StatesIndustry: Unknown
Updated continuously · figures as of Oct 19, 2026
Claimed by
Cactus, BlackBasta
First listed
Feb 26, 2024
Claims recorded
2

2 Leak-Site Claims.

CactusConfirmed claim
Posted on the leak site
Jul 30, 2024
Collected by Brandefense
Jul 11, 2025
Data claimed
575 GB
Leak-site post text, written by the group
food & beverage “in addition to manufacturing our exclusive flavored soft drinks and juices, leonard's is the regions largest supplier of bulk co2 and specialty gases. as indicated throughout this website, leonard's excels in the installation and service of soda dispensing equipment, draft beer equipment and innovative liquor control systems.” website: [removed] revenue: $22m address: 4601 nancy st, detroit, michigan, 48212,, united states phone number: [removed] download link #1: [removed] mirror: [removed] data descriptions: employees personal and corporate data, personal identifiable…
BlackBastaConfirmed claim
Posted on the leak site
Feb 26, 2024
Collected by Brandefense
Jul 11, 2025
Data claimed
Not stated
Leak-site post text, written by the group
leonard’s syrups. proudly servicing michigan since 1964. celebrating 55 years in business, leonard’s syrups, a family-owned and operated company, has been a trusted supplier to bars, breweries, and restaurants - large and small - since its establishment in 1964. as a leading beverage gas, draft beer equipment, soda machine, and coke syrup supplier in detroit, saginaw, and grand rapids, leonard’s syrups serves the diverse needs of businesses all over michigan, cementing their legacy as a dependable partner in the foodservice industry for over five decades. site: [removed] address: 4601 nancy…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
kyb.com
kyb.com
CactusUSUnited StatesTransportation and Logistics, ManufacturingNot stated
assaabloy.com
assaabloy.com
CactusUSUnited StatesManufacturing, ConstructionNot stated
baillie.com
baillie.com
CactusUSUnited StatesManufacturing, ConstructionNot stated
thermoid.com
thermoid.com
CactusUSUnited StatesUnknownNot stated
tempel.com
tempel.com
CactusUSUnited StatesManufacturing, MiningNot stated
rocketstores.com
rocketstores.com
CactusUSUnited StatesUnknownNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.