Aarsleff listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Sweden
• Sector: Manufacturing
• Announcement date: September 16, 2026

Qilin ransomware group claims data breach at Aarsleff

The Qilin ransomware group has officially listed the Swedish organization Aarsleff on its dedicated leak site. Through this announcement, the threat actor group claims to have successfully exfiltrated data from the company's systems. This development follows a pattern of activity often observed in modern cyber extortion campaigns, where attackers target specific organizations to pressure them into meeting financial demands.

The listing appeared on the group's portal on September 16, 2026. According to the claims made by the Qilin group, they gained unauthorized access to the organization's internal systems. As part of their public announcement, the group has shared visual evidence that purportedly relates to the administrative or operational processes of the company, intended to demonstrate the validity of their intrusion.

Details of the claimed data exfiltration

While the full scope and total volume of the leaked data have not been specified by the attackers, the group has provided certain visual indicators. The shared screenshots appear to contain sensitive documentation that could impact the company's internal operations. The specific types of information identified in the shared materials include:

• Technical drawings
• Schematic documents
• Corporate correspondence

The presence of such documents suggests that the breach may involve proprietary technical information and internal communications. It is important to note that the exact amount of data stolen and the total file count remain unknown, as no specific figures were provided in the announcement.

About Aarsleff

Aarsleff is a construction and engineering company based in Sweden. The firm specializes in several complex technical areas, including pile driving, ground improvement, and various infrastructure projects. Their professional focus is particularly centered on providing complex geotechnical engineering solutions and utilizing advanced pipeline renovation technologies.

Potential impact and security implications

This incident may pose a significant risk regarding the exposure of sensitive corporate information within Aarsleff. Because the organization is based in Sweden, the potential leak of data could lead to legal consequences under the EU General Data Protection Regulation (GDPR). The nature of the stolen documents, such as technical drawings and schematics, may also result in long-term negative impacts on the organization's intellectual property rights and its broader commercial operations.

Given that the Qilin group is known for utilizing double-extortion tactics, there is a possibility that the leaked data could be utilized for secondary attacks. This often includes targeted phishing campaigns where attackers use stolen corporate correspondence to craft highly convincing messages to employees or partners. In double-extortion scenarios, even if an organization can restore its systems from backups, the threat of leaking sensitive data remains a powerful tool for the attackers.

For organizations operating in the manufacturing and engineering sectors, such incidents highlight the importance of robust data protection strategies. Common defensive steps include implementing strict access controls, enhancing monitoring of data exfiltration, and ensuring comprehensive encryption of sensitive technical files. Information regarding the specific capabilities and background of the Qilin group remains limited at this time.