Dacas Argentina listed on Qilin ransomware leak site
Dacas Argentina, operating in the agriculture and food production sector, has been listed on the leak site of the Qilin ransomware group.
- Published
- 1 min read
- 1 min read
- Ransomware group: Qilin
- Country: Argentina
- Sector: Agriculture and Food Production
- Announcement date: March 10, 2025
Qilin ransomware group claims attack on Dacas Argentina
The Qilin ransomware group has officially listed the Argentine company Dacas Argentina on its dedicated leak site. According to the announcement made by the threat actors, the organization has been targeted in a cyberattack, and the group is threatening to release stolen information if their demands are not met. This development follows a pattern of activity observed from the Qilin group, which frequently utilizes leak sites to pressure victims through public exposure.
The group claims to have successfully carried out a ransomware attack against Dacas Argentina on March 10, 2025. According to the group's announcement, which was made public through their own leak platform, they assert that they have obtained the company's data. The threat actors have set a deadline of March 17, 2025, stating that the stolen data will be published if a ransom is not paid by that date. As of the time of this report, the specific details regarding the ransom demand and the exact volume of the data involved remain undisclosed by the group.
Details regarding the claimed data breach
While the Qilin group has announced the breach, they have not provided specific details regarding the nature of the leaked information. The group's announcement included a screenshot, but the image remains blurred, making it impossible to discern specific content details or identify exactly what files were compromised. Consequently, the listing names no specific data types.
In modern ransomware campaigns, particularly those involving double extortion, threat actors often move beyond simple encryption. Double extortion involves stealing sensitive information before encrypting the systems, allowing the attackers to threaten the victim with the public release of their data. This tactic is designed to maximize leverage, as organizations may have backups to restore their systems, but they cannot