Ransomware claim: La Filipina Uy Gongco (inc ransom)

# La Filipina Uy Gongco Corporation (LFUGGOC) — Philippines

**Published:** [DATE]
**Data Volume:** 278,594 files

—

## Company Overview

**La Filipina Uy Gongco Group of Companies (LFUGGOC)** is a major Philippine conglomerate operating across multiple industries including food manufacturing, flour milling, animal feed production, sugar processing, livestock farming, port operations, logistics, and real estate.

**Website:** foodgroup.ph
**Headquarters:** Taguig City (BGC), Metro Manila, Philippines
**Employees:** 1,500+
**Annual Revenue:** Estimated PHP 15-20 billion ($270-360M USD)
**Auditor:** SGV & Co. (Ernst & Young Philippines)
**ERP:** SAP S/4HANA

The group operates 17+ legal entities across the Philippines with nationwide operations spanning Luzon, Visayas, and Mindanao regions, including 6+ port terminals, flour mills, feed mills, sugar centrals, farms, retail stores, and distribution networks.

—

## Group Entities

| Segment | Companies |
|—|—|
| **Logistics** | Amigo Logistics Corp (ALC), Amadi ALC Services (AASI), Amadi MGT Terminals (AMTI), Mariveles Grain Corp (MGC) |
| **Flour & Pasta** | Philippine Foremost Milling Corp (PFMC), PLILI, MT Philippine Container (MTPCI) |
| **Feeds & Livestock** | LFUG Manufacturing (LFMI), Farms Division, Progreso Retail Stores (PRSI) |
| **Sugar** | CSCI, CAFC, RAFC, Plantation Division |
| **Commodities** | Advanced Agrisolutions Philippines Corp (AAPC), Gentle Earth |
| **Holdings** | CDH Holdings, STARCI/PGIC, Hok Heng/HHH Trading |
| **Real Estate** | LFUG Realty |

—

## Data Exfiltrated

Complete contents of the production file server (FILESHARED01) containing 278,594 files spanning 2018-2026, including:

### Financial Data
– **Consolidated Financial Statements** for the entire group (FY2022 through July 2026)
– **Annual Financial Statements** (AFS) for all business units
– **Budget files** for 2022-2027 including forward projections
– **SGV (Ernst & Young) external audit workpapers** (2022-2025)
– **Bank statements** and reconciliation files (BPI, BDO, Metrobank)
– **Loan documents** including PHP 300M+ BPI promissory notes and amortization schedules
– **Quarterly Income Tax Returns** and all BIR filings

### Employee Data (PII)
– **Complete payroll summaries** for all months of 2025 (24 files, ~13MB each)
– **Employee Alphalist** (JAN-DEC 2025) — all employee TIN numbers and annual income
– **Employee contact details** — names, phone numbers, email addresses, positions
– **13th Month Pay summaries**
– **Leave summaries** and tax refund data
– **SSS, HDMF (Pag-IBIG), and PhilHealth** contribution records

### Organizational Data
– **30+ organizational charts** for all business units (dated March 2025)
– **Job descriptions** with career paths for all positions
– **KPI documents**
– **Headcount reports** (2026)

### Customer & Vendor Data
– **Customer contact database** (26MB) including major Philippine food brands:
– Jollibee Foods Corporation
– Goldilocks Bakeshop Inc
– Shakey’s Pizza Commerce Inc
– The French Baker Inc
– Pan De Manila
– North Park Noodle House
– Vikings Group
– Monde Nissin Corporation
– Del Monte Philippines
– **100+ flour bakery client files** across the Philippines
– **30+ notarized vendor contracts**

### Legal & Compliance
– Correspondence and billing from **5 law firms** (MVGS Law, SAM Law, MOST Law, Rojas & Uy, Tillman & Marquez)
– **Litigation files**
– **SEC filings** and corporate governance documents
– **BIR validated tax returns** (2022-2025)
– **Business permits** (Taguig, Davao, Iloilo, Ingore)
– **Insurance policies** and asset registers

### Operations
– **Import/export documentation** and customs records
– **Vessel operations** data and shipping schedules
– **SAP S/4HANA** data exports, journal entries, and master data
– **Marketing materials** for brands: Iron Claw, Canis Prime, IC+, Progreso
– **IT infrastructure** data including database connection files

—

## Regulatory Implications

This data is subject to the **Philippine Data Privacy Act of 2012 (Republic Act No. 10173)**, which requires:
– **Mandatory breach notification** to the National Privacy Commission (NPC) within 72 hours
– **Notification to affected data subjects** (1,500+ employees and thousands of customers)
– Penalties of up to **PHP 5,000,000** and **imprisonment of 3-6 years** for violations

The company has **5 business days** to respond before data publication begins.

—

## Proof of Data

See attached screenshots showing:
1. Complete file server directory structure
2. Employee payroll files with dates and sizes
3. Group consolidated financial statements
4. HR organizational charts for all business units
5. Customer contact database and email addresses
6. Banking documents and tax filings

  • Group: inc ransom
  • Discovered: 2026-11-10 22:33 UTC

This entry reflects a claim published by an extortion group and collected by a public tracker. It has not been independently verified.

Source: RansomLook — Recent Posts · 2026-11-10