Qilin Ransomware announced new victims

According to Resecurity’s new report, the Qilin RaaS operation relies on a network of bullet-proof hosting (BPH) infrastructures to support its extortion activities, a pattern the article notes as part of its broader capabilities. The piece states that Qilin recently claimed responsibility for the September ransomware attack that disrupted operations at Asahi Group Holdings for nearly two weeks, and that the operators are attempting to sell the stolen data for $10 million USD.

New targets and confirmed victims were announced by Qilin on 15 October 2025, including the Agencia Tributaria, Centurion Family Office Services LLC, Rasi Laboratories, Victory Christian Center, Richmond Behavioral Health Authority, Turnkey Africa, Charles River Properties, the New Jersey Property-Liability Insurance Guaranty Association, Commune De Saint Claude, and Ville-Elne.

Prior to that, on 14 October 2025, Qilin disclosed compromises at Volkswagen Group France, San Bernard Electric Cooperative and Karnes Electric Cooperative. The article notes a growing focus on the US and on local municipalities, with more than 50 new victims published across sectors and geographies such as Croatia, France and Germany.