Skip to content
Ransomware

Cimertex listed by Qilin ransomware group

The Qilin ransomware group has listed Cimertex on their leak site, claiming a data breach.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Qilin
  • Country: Portugal
  • Sector: Manufacturing
  • Announcement date: November 20, 2025

Qilin ransomware group claims data breach against Cimertex

The Qilin ransomware group has listed the Portuguese manufacturing company Cimertex on their dedicated leak site. Through this announcement, the threat actor group claims to have successfully compromised the organization's data and has made this information public to the community.

Details of the claimed attack

The announcement was made on November 20, 2025. According to the claims made by the Qilin group, the organization's data has been compromised. The group has provided visual evidence to support their claims, which suggests that operational or administrative data may have been exfiltrated from the company's systems.

The evidence provided in the leak site announcement includes screenshots of documents. These screenshots display blurred samples of documents that appear to be related to the organization's internal correspondence or financial records. While these images suggest the presence of sensitive information, the specific contents remain obscured in the public post.

Affected data and information

The listing names no specific data types or file counts.

About Cimertex

Cimertex is a Portugal-based manufacturing company operating in the textile sector. The organization specializes in the production of technical textiles and industrial fabrics.

Risk assessment and industry implications

This incident may pose significant risks to the organization's operational continuity and data privacy. Because the organization is based in Portugal, a confirmed breach could lead to legal obligations and administrative sanctions under the General Data Protection Regulation (GDPR).

The Qilin group is known to employ a double-extortion strategy. This method involves both encrypting an organization's data to disrupt operations and leaking the stolen data to pressure the victim into paying a ransom. Due to this tactic, the exposure of trade secrets is a significant concern. Furthermore, there is a potential risk that third parties could be targeted by phishing attacks resulting from this breach. Depending on the nature of any leaked data, employees or business partners could also face risks related to identity theft.

In such scenarios, organizations typically face challenges regarding maintaining business operations while managing the fallout of a data leak. While information about the Qilin group remains limited, the threat they pose to the manufacturing sector highlights the ongoing risks of data exfiltration and the complexities of modern ransomware extortion methods.

From the Professional plan

Phishing & Brand Protection

Monitor domains, phishing pages, ads and listings that impersonate your brand, and open takedown requests from the panel.

Related stories