Dacon Networks listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Singapore
• Sector: Technology
• Announcement date: December 15, 2025

The Qilin ransomware group has listed Dacon Networks on its leak site, claiming that the organization has been the victim of a data breach. This announcement, made on December 15, 2025, marks a new instance of the group targeting a technology firm to exert pressure through public exposure.

The claimed attack

The threat actor known as Qilin listed Dacon Networks on its leak portal on December 15, 2025. According to the group's announcement, they claim to have obtained data that allegedly belongs to the organization. This specific type of listing is often interpreted by security researchers as a strategic move by the threat actor to pressure the victim organization using double-extortion tactics.

Double-extortion is a common methodology used by modern ransomware operators. In this scheme, the attackers do not merely encrypt the victim's files to disrupt operations; they also exfiltrate sensitive information before the encryption process begins. The threat actors then threaten to release this stolen data on public leak sites if the ransom demands are not met. This tactic increases the pressure on the victim, as the threat of a data leak can lead to significant reputational damage, regulatory scrutiny, and legal consequences, even if the organization has robust backups to restore their systems.

Data involved in the breach

Regarding the specific content of the allegedly leaked data, the announcement provided no specific information or list of sample files. The listing does not name any specific data types that have been compromised.

About Dacon Networks

Dacon Networks is a technology company based in Singapore. The organization operates in the fields of network solutions, system integration, and IT infrastructure services.

Analysis and potential impact

Qilin is known as a ransomware-as-a-service (RaaS) group that has been operating since 2022. The group frequently employs double-extortion tactics to maximize their leverage over targets. Given that Dacon Networks operates within the technology sector, the breach may pose significant risks to trade secrets or customer data. The nature of the organization's work in network solutions and IT infrastructure means that any compromise could potentially impact the integrity of the services they provide.

Because the organization is based in Singapore, a potential data breach could trigger legal processes under the Singapore Personal Data Protection Act (PDPA). Organizations operating in highly regulated environments must be prepared for the legal and compliance complexities that follow a data exfiltration event. The group's past activities suggest a tendency to publicly release data if ransom demands are not met, which underscores the urgency of incident response during such events.

Secondary risks associated with this type of breach include the potential use of leaked data for identity theft or targeted phishing attacks. When sensitive information is leaked, attackers often use it to craft highly convincing social engineering campaigns against the organization's employees or its client base. To defend against such threats, organizations typically focus on implementing robust data loss prevention (DLP) measures, enhancing monitoring of data exfiltration, and ensuring strict access controls are in place to limit the movement of sensitive information within the network.