CIIF Oil Mills Group
Data Breach on December 18, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | ciif.ph | ||
| Threat Actor | Qilin | ||
| Date Discovered | Dec 18, 2025 | ||
| Description | The Coconut Industry Investment Fund Oil Mills Group (CIIF OMG) is a government-owned conglomerate of coconut oil mills and refineries based in the Philippines, producing coconut-based products for global markets, known for brands like Minola, aiming to support coconut farmers through the Coco Levy Funds. | ||
| Leak Size | 45GB |
Credential Exposure for ciif.ph
We've indexed 31 @ciif.ph accounts from external breaches, plus 6 credentials for ciif.ph itself.
Last checked Aug 16, 2026
| @ciif.ph addresses from external breaches | |
|---|---|
| Third-party breaches | 21 accounts · across 19 breaches · 20 with a plaintext password · most recent Mar 12, 2024 |
| Combo lists | 12 accounts · most recent Aug 6, 2026 |
| Passwords for ciif.ph accounts | |
|---|---|
| Combo lists | 6 logins · most recent Aug 6, 2026 |
| Infostealer logs | 1 logins · 1 infected devices · most recent Feb 14, 2025 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
CIIF Oil Mills Group was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.