Airtificial listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Spain
• Sector: Technology
• Announcement date: October 22, 2026

Qilin claims Airtificial in new leak site listing

The ransomware threat actor known as Qilin has added Airtificial, a prominent industrial technology company based in Madrid, to its dedicated leak site. The announcement, which appeared on October 22, 2026, marks a new potential data breach involving the Spanish organization. However, the listing provided by the threat actor is notably sparse, offering no specific details regarding the nature or the volume of the data allegedly compromised in the attack.

Details of the alleged attack

According to the claim made by Qilin on October 22, 2026, Airtificial has been targeted in a cyberattack. Despite the listing appearing on the group's platform, the announcement lacks any supporting documentation or descriptive information to substantiate the claim. There is no mention of the total amount of data stolen, nor is there a specific count of files involved in the incident. Furthermore, the listing does not include any reference to a public statement from Airtificial regarding the situation, leaving the scope of the incident unverified at this time.

Ransomware groups often utilize leak sites to pressure victims through a tactic known as double extortion. In this model, attackers not only encrypt an organization's internal systems but also exfiltrate sensitive information, threatening to release it publicly if a ransom is not paid. This method significantly increases the pressure on an organization, as the threat of a data leak can lead to severe reputational damage, regulatory scrutiny, and legal liabilities, even if the organization can restore its systems from backups.

Information involved in the leak

The listing provided by the threat actor does not specify the types of information that have been allegedly exfiltrated from the company's systems.

• The listing names no data types.

About Airtificial Intelligence Structures S.A.

Airtificial Intelligence Structures S.A. is an industrial technology company headquartered in Madrid, Spain. The company is a significant player in the European industrial sector and is listed on the Spanish stock exchange. Formed in 2018 through the merger of Inypsa and Carbures, the organization has established a specialized presence in several critical industries.

The company's operations are focused on providing advanced solutions in the following areas:

• Aerospace and defence
• Infrastructure
• Intelligent robotics for automotive assembly and test lines

With a workforce of approximately 900 employees, Airtificial provides complex engineering and manufacturing solutions to high-stakes sectors.

Analysis and potential implications

Because the Qilin group has not provided any sample files or specific details, the actual scope and impact of this claim cannot be verified. However, the nature of Airtificial's business suggests that if a breach has indeed occurred, the stolen data could be highly sensitive. Given that the company provides engineering and manufacturing solutions to the aerospace, defence, and automotive sectors, a potential leak could involve technical drawings, project documents, and commercial contracts. Such a breach could present a significant supply-chain risk for the company's diverse client base.

Furthermore, as a company listed on a stock exchange, Airtificial may face material-event disclosure obligations if the incident is confirmed to be significant. Additionally, if any personal data belonging to employees or clients was affected, the company might be required to notify the Spanish data protection authority (AEPD) under the requirements of the General Data Protection Regulation (GDPR).

Qilin has been an active threat actor since 2022. The group is known to operate using a ransomware-as-a-service (RaaS) model, which allows different affiliates to use their infrastructure to conduct attacks. This model has contributed to the group's reputation as one of the most active ransomware operators in the current threat landscape.

For organizations operating in high-precision sectors like aerospace and automotive, maintaining robust cybersecurity defenses is critical. This includes implementing strict access controls, conducting regular security audits, and ensuring that all supply-chain partners adhere to rigorous data protection standards to mitigate the risk of cascading failures across the industry.