Skip to content
Ransomware

Antica Sartoria listed on Qilin ransomware leak site

The Qilin ransomware group has listed the Italy-based retail and e-commerce firm Antica Sartoria on its leak site.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Qilin
  • Country: Italy
  • Sector: Retail & E-Commerce
  • Announcement date: April 29, 2026

Qilin ransomware group targets Antica Sartoria

The Qilin ransomware group has listed the Italy-based retail and e-commerce firm Antica Sartoria on its leak site. This announcement, made on April 29, 2026, indicates a targeted operation against the fashion brand. The threat actor has published an announcement regarding this incident, claiming to have compromised the institution's data through an intervention against its digital assets.

Details of the claimed attack

According to the announcement posted on the group's platform, the threat actor known as Qilin listed Antica Sartoria on April 29, 2026. The group claims to have successfully carried out an intervention against the institution's digital assets. This type of claim is a common component of modern ransomware operations, where attackers assert they have gained unauthorized access to a target's internal systems to facilitate extortion.

While the group has made these claims, specific technical details regarding the method of entry or the exact nature of the digital intervention have not been provided in the public announcement. The listing serves as a notification to the public and the target that the group believes they have successfully breached the organization's perimeter.

Scope of the compromised data

At this stage, no details regarding the nature of the leaked or compromised data have been provided by the threat actor. The announcement is currently lacking specific information regarding the volume of data or the specific files involved. The screenshot provided by the group displays the institution's logo, but it does not specify the type or scope of the leaked data.

  • No specific data types or file categories have been identified in the listing.

The absence of specific data descriptions makes it difficult to determine the exact impact of the breach at this time. The group has not disclosed the total number of files or the total size of the data they claim to possess.

About Antica Sartoria

Antica Sartoria is a fashion brand based in Positano, Italy. The company specializes in traditional Positano fashion and beachwear. It is widely known for its colorful and unique designs that feature various handmade details, catering to the specific aesthetic of the Positano region.

Analysis and potential implications

The Qilin group is known as an entity that employs double extortion tactics and has been active since 2022. Double extortion is a strategy where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This method increases the pressure on the victim to pay the ransom, as the threat of data exposure provides additional leverage.

The publication of the institution's data may lead to secondary risks such as the exposure of customer and employee information. As an Italy-based firm, a potential data breach may result in legal sanctions under the General Data Protection Regulation (GDPR). Organizations operating in the retail and e-commerce sectors must be aware that such incidents can lead to significant reputational damage and operational disruptions.

Given the group's past activities, the publication of data could lead to various complications for the organization. The institution may need to investigate the leak claims and take precautions against potential identity theft or phishing attacks. In general, organizations facing such threats should focus on robust incident response plans, continuous monitoring of digital assets, and ensuring compliance with regional data protection frameworks to mitigate the impact of potential breaches.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories