Canvas Church listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Announcement date: December 6, 2025

Canvas Church targeted by Qilin ransomware group

The Qilin ransomware group has listed Canvas Church on its dedicated leak platform. According to the announcement made on December 6, 2025, the threat actor group claims to have successfully exfiltrated data belonging to the organization. This development marks a new instance of the group targeting specific entities to pressure them through public exposure.

Details of the claimed attack

The announcement regarding the targeting of Canvas Church was officially posted on the Qilin leak site on December 6, 2025. The group's claim involves the unauthorized exfiltration of data from the organization's systems. While the group has made this public claim, the specific details regarding the nature of the breach remain limited to the group's own announcement.

Regarding the specifics of the leaked information, no details regarding the content of the leaked data have been shared by the group. Furthermore, the provided screenshot associated with the listing is insufficient to verify the actual text content or the specific types of files that may have been compromised. Consequently, the listing names no specific data types.

About Canvas Church

Canvas Church is a Christian church based in the United States. The organization conducts community-focused worship services and various religious activities within its community.

Analysis and potential impact

The Qilin group is a known threat actor that frequently employs double extortion tactics. In a double extortion scheme, attackers do not merely encrypt an organization's data to disrupt operations; they also steal sensitive information and threaten to publish it on a leak site if a ransom is not paid. This tactic significantly increases the pressure on the victim, as the threat of public exposure can lead to severe consequences.

The potential impact of such a breach is multifaceted. For an organization like Canvas Church, the exposure of sensitive data could create secondary risks for its members and employees, such as identity theft or the risk of targeted phishing attacks. Furthermore, because the organization is based in the United States, the incident may trigger legal processes under various state-level data protection regulations.

Historically, the activities of the Qilin group suggest that such attacks can cause significant disruption to operational continuity. Beyond the immediate technical impact, these types of incidents can also leave a lasting negative impact on an organization's reputation. To mitigate such risks, organizations often focus on strengthening their defensive postures through robust backup strategies, comprehensive employee training to prevent phishing, and strict access controls to limit the movement of attackers within a network.