EPLS: Entreprise d'installations électriques courant fort listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: France
• Sector: Energy & Utilities
• Announcement date: September 8, 2025

Qilin ransomware group claims data breach at EPLS

The Qilin ransomware group has officially listed the French company EPLS: Entreprise d'Installations électriques Courant Fort on its leak site. According to the announcement made on September 8, 2025, the threat actor group claims to have successfully exfiltrated data belonging to the organization. This development follows the group's pattern of publicizing breaches to pressure victims through exposure.

The group alleges that the breach occurred on the same day the announcement was posted, September 8, 2025. While the group has claimed responsibility for the incident, no specific details regarding the volume of data stolen or the specific ransom demand have been provided in the public announcement.

Details of the alleged data leak

The Qilin group claims to have obtained sensitive information regarding the company's critical infrastructure projects. The announcement alleges that the compromise includes the organization's operational and financial data, as well as information pertaining to its employees. According to the group, the leaked dataset contains several categories of sensitive information, which they have attempted to demonstrate through sample images of the files in their announcement.

The specific types of data allegedly compromised include:

• Employee personal data
• Customer data
• Financial data
• Technical documents

Ransomware groups often employ a tactic known as double extortion. In this method, attackers do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive data before the encryption phase. This allows the attackers to threaten the public release of the stolen information if the ransom is not paid, creating a second layer of leverage over the victim organization.

About EPLS: Entreprise d'installations électriques courant fort

EPLS is an engineering firm based in France. The company specializes in the design and installation of both high and low voltage electrical systems. Their work is focused on providing essential services for critical infrastructure, including high-stakes environments such as airports, hospitals, and data centers.

Risk assessment and industry implications

This alleged leak by the Qilin group may pose a high risk due to the company's involvement in critical infrastructure projects. Because EPLS operates within sectors vital to public safety and continuity, such as healthcare and transportation, the exposure of technical documents and operational data could have significant implications. The compromised data could lead to identity theft or targeted phishing attacks against company employees and customers.

Furthermore, as the company operates in France, the incident may trigger data breach notification obligations and legal sanctions under the General Data Protection Regulation (GDPR). Organizations operating in the energy and utilities sector often face heightened scrutiny regarding data protection due to the sensitive nature of their technical and client information.

In general, organizations facing such threats can benefit from implementing robust defensive measures. These include maintaining offline backups, enforcing multi-factor authentication across all systems, and conducting regular security awareness training to help employees recognize phishing attempts. Given that the Qilin group has been active since 2022, but information about the group remains limited, organizations must remain vigilant against their evolving tactics.