Anabuki Kosan listed by Qilin ransomware group

• Ransomware group: Qilin
• Country: Japan
• Sector: Manufacturing
• Announcement date: February 10, 2026

Qilin ransomware group claims breach of Anabuki Kosan

The Qilin ransomware group has officially listed the Japanese organization Anabuki Kosan on its dedicated leak site. Through this announcement, the threat actor group is alleging that they have successfully carried out a data breach against the company. This development follows a pattern of activity often seen in modern cyber extortion campaigns, where groups use public-facing platforms to pressure victims by threatening the release of stolen information.

Details of the alleged attack

According to the announcement made on February 10, 2026, the Qilin ransomware group claims to have gained unauthorized access to the internal systems of Anabuki Kosan. The group asserts that this access allowed them to exfiltrate data from the organization's network. To support their claims of a successful intrusion, the group has shared various images of files that they allege belong to the organization.

Ransomware leak sites serve as a tool for extortion, where attackers post names of victims to increase psychological pressure. These sites often host directories of stolen files to demonstrate the legitimacy of the breach. In this specific instance, the group's post on February 10, 2026, serves as the primary evidence for their claim of a successful infiltration and subsequent data theft.

Information regarding the leaked data

Despite the claims made by the Qilin group, there is currently no clear information regarding the specific content of the leaked data. While the group has provided screenshots to validate their intrusion, the images of the files shared in these screenshots are blurred. Consequently, it is impossible to identify the specific data types that may have been compromised during the alleged attack.

The listing names no specific data types or file categories at this time. Because the visual evidence provided by the attackers is obscured, the exact nature of the information—whether it involves corporate intellectual property, employee records, or customer databases—remains unknown to the public.

About Anabuki Kosan

Anabuki Kosan is a prominent organization based in Japan. The company is involved in several key areas of the real estate and construction industries. Specifically, Anabuki Kosan operates as a real estate development, construction, and property management company. Their primary business operations are focused on residential projects and urban redevelopment initiatives within the Japanese market.

Risk assessment and industry implications

The situation involving Anabuki Kosan highlights the significant risks associated with double-extortion tactics. In a double-extortion scenario, ransomware actors do not merely encrypt a victim's data to disrupt operations; they also steal sensitive information to use as leverage. If the Qilin group follows this known pattern, there is a significant risk that the organization's data will be published on the dark web.

Such a leak could lead to several secondary consequences. For the organization, the public release of data can result in identity theft or the execution of targeted phishing attacks aimed at the company's employees and customers. Furthermore, since Anabuki Kosan is based in Japan, any confirmed data breach may lead to legal consequences under Japan's Act on the Protection of Personal Information (APPI), which regulates how personal data must be handled and protected.

Given the historical activities of the Qilin group, it is possible that any leaked data could be utilized in subsequent, secondary attacks against the organization or its partners. Organizations operating in the manufacturing and real estate sectors often face these risks, and the potential for data to be repurposed for further malicious activity remains a primary concern for cybersecurity professionals. Defensive measures typically involve robust network segmentation, continuous monitoring for unauthorized exfiltration, and strict adherence to regional data protection regulations to mitigate the impact of such incidents.