Breaches and incidents

GSP Crop Science (India): ransomware on non-core IT systems

The Ahmedabad agrochemical maker disclosed (2 Jul) a cyber incident affecting non-core IT systems that “appears to involve ransomware”.

Disclosed
Verification
Checked against a primary source

What happened

  • The Ahmedabad agrochemical maker disclosed (2 Jul) a cyber incident affecting non-core IT systems that “appears to involve ransomware”; ERP, manufacturing, sales and finance continued normally. It concluded on 1 Jul that the event was external.
  • Root cause: not disclosed.
  • Attacker: not named by the company; INC Ransom listed gspcrop.in on its leak site on 25 Jun 2026 per the ransomware.live tracker (claim only).
  • Response: incident response and BCP activated, external experts, restoration under way.