BRIEFRansomwarehighP72
Qilin ransomware publishes US manufacturer Westin Automotive
Westin Automotive
Detected26 October 2026 · 14:29 UTC
The Qilin ransomware group has listed Westin Automotive, a US automotive parts manufacturer, on its leak site, indicating an active or recently completed intrusion with threatened data release. As a manufacturing supplier, the victim sits in the automotive supply chain where disruption can cascade to downstream customers. Defenders in manufacturing should review this as a current, time-sensitive extortion event until exfiltration and impact are clarified.
CategoryRansomware
Severityhigh
Priority score72
Detected26 October 2026 · 14:29 UTC
Ransomware● 58
Ransomware 'auditteam' publica al proveedor británico Safe Data StorageThe Auditteam leak site names Safe Data Storage Ltd, a Kent-based SME that sells managed backup and disaster recovery on its own ISO 27001 private cloud for Microsoft 365, Veeam and Arcserve workloads. Compromise of a backup provider endangers the recovery copies of many downstream client organisations, so the real exposure footprint is larger than the single victim. No publication date is confirmed in this item, so freshness should be verified before escalation.Ransomware● 42
Ransomware Qilin publica a la constructora estadounidense Seufert ConstructionQilin published US construction firm Seufert Construction on its public leak site. Construction firms hold project, contractor and client records that can drive business-email-compromise and vendor fraud. It sits outside Latin America but reinforces Qilin's broad cross-sector targeting.Ransomware● 42
Ransomware Qilin publica a la firma estadounidense Miller StratvertThe Qilin group listed Miller Stratvert, a US company, on its leak site. Such victims often expose internal email, legal or client records that fuel further extortion and fraud. Outside Latin America, but useful for tracking Qilin's steady publication cadence.Ransomware● 44
Ransomware Qilin publica al minorista francés BCSA GearQilin added French retail/e-commerce firm BCSA Gear to its public extortion site. Retail victims typically expose customer accounts and payment-adjacent data useful for follow-on fraud. It is outside Latin America but shows continuing Qilin pressure on European retailers.Ransomware● 46
Ransomware Qilin publica a la manufacturera japonesa Nissho ElectricQilin published Nissho Electric Manufacturing Co., a Japanese manufacturer, on its leak site. Manufacturing victims can expose operational technology, supplier and client data that enable further industrial attacks. It is outside Latin America but relevant to tracking Qilin's global targeting of industrial firms.Ransomware● 50
Ransomware Qilin publica al distrito escolar Burnaby Schools de CanadáThe Qilin ransomware group added Burnaby Schools, School District 41 in Canada, to its public leak site. Education districts hold student and staff personal data and sensitive records, making them attractive for extortion and downstream identity fraud. The victim is outside Latin America but signals ongoing Qilin activity in education.