Centrotherm International listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Germany
• Sector: Manufacturing
• Announcement date: January 25, 2026

Qilin ransomware group claims breach of Centrotherm International

The threat actor known as Qilin has listed the German technology company Centrotherm International on its dedicated leak site. The announcement, made on January 25, 2026, includes a claim of a data breach against the organization. This development indicates that the group asserts it has successfully gained access to the internal systems of the target company.

Ransomware leak sites are platforms used by cybercriminal groups to exert pressure on victims. These sites often host lists of compromised organizations to shame them into paying ransoms. When a group lists a company, it serves as a public signal that the victim's digital assets may have been compromised. Such incidents often create significant uncertainty regarding the integrity of the organization's network and the security of its stored information.

Details of the alleged attack

According to the announcement published by the Qilin group, the attack was claimed to have occurred on January 25, 2026. The group maintains that they have successfully breached the organization's systems. This type of intrusion typically involves gaining unauthorized access to a network to exfiltrate sensitive information or encrypt critical files.

Regarding the specific content of the breach, no information regarding the nature of the alleged leaked data has been provided. The available evidence, such as screenshots, does not offer sufficient detail to verify the specific content or the exact scope of the compromise. Consequently, the listing names no specific data types that have been targeted or stolen.

About Centrotherm International

Centrotherm International is a technology company based in Germany. The organization specializes in the development and manufacture of thermal processing solutions. Their production systems are designed for use in several high-tech industries, including the solar, semiconductor, and microelectronics sectors.

Risk assessment and industry implications

This incident may pose a significant risk to the operational continuity of the organization. Because the organization is based in Germany, a potential data breach could trigger legal sanctions and notification obligations under the General Data Protection Regulation (GDPR). Compliance with such regulations is a critical aspect of managing cybersecurity incidents in the European Union.

The Qilin group is known for employing double-extortion tactics. In a double-extortion scenario, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This tactic increases the pressure on the victim, as the threat of leaking data can lead to secondary attacks or identity theft. If trade secrets or employee data are disclosed, the organization could face long-term reputational damage.

For organizations operating in the manufacturing and high-tech sectors, maintaining robust cybersecurity posture is essential. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular network monitoring to detect unauthorized access. As public information regarding the Qilin group remains limited, organizations must remain vigilant against their evolving tactics.