On January 4, 2025, Perú Controls S.A.C. appeared on the leak site of the ElDorado ransomware group after the attackers exfiltrated internal company files during a ransomware incident. The Peruvian grocery retail firm, which employs between 250 and 499 people and generates roughly $19.1 million in annual revenue, joins a growing list of organizations whose data has been publicly listed following an intrusion.
Watch Perú Controls S.A.C.
Get alerted the next time Perú Controls S.A.C. files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Perú Controls S.A.C.’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates the company, also referred to as Control Union Perú SAC, is headquartered in Miraflores in the Lima region of Peru. The attackers claim to have stolen internal files, though the exact volume and specific types of data remain unclear from available reporting. No customer records or employee counts beyond the broad employment range have been independently verified in public sources. The listing appeared on the ElDorado leak portal, which is tracked by ransomware monitoring services such as ransomware.live.
Why This Matters for You and Your Family
When a company like your local grocery supplier or a vendor you use has its internal files stolen, the ripple effects can reach your personal information. Internal files often contain contracts, employee directories, vendor lists, or payment details that include names, addresses, and contact information of ordinary customers and staff. If your data is among the exposed material, it can be combined with other breaches to build a profile that puts your family at risk of identity theft, phishing, or harassment. For families in Peru or those who do business with Peruvian retailers, this incident is a reminder that even mid-sized regional companies hold data that matters to everyday life.
The Doxxing and Identity-Chain Implications
Stolen internal files frequently include email addresses, phone numbers, and employee or customer usernames that link online handles to real-world identities. Once attackers or opportunistic criminals obtain these connections, they can follow the chain across social media, gaming platforms, and other services. A credential leak from a work-related system can quickly cascade into takeover of personal accounts, including your children’s gaming profiles that often reuse the same email or password. This identity-chain effect turns a corporate breach into a personal exposure that can lead to doxxing, stalking, or financial fraud targeting you or members of your household.