Eptisa listed on Qilin ransomware leak site following alleged data breach

• Ransomware group: Qilin
• Country: Spain
• Sector: Professional Services
• Announcement date: October 7, 2026

Qilin group claims data breach at Eptisa

The threat actor known as Qilin has listed the organization Eptisa on its dedicated leak site. This announcement, made on October 7, 2026, involves an allegation of a data breach against the Spanish company. By listing the organization on their platform, the group is publicly claiming that they have obtained data belonging to Eptisa.

This type of public listing is a hallmark of modern ransomware operations. Such actions are frequently interpreted as an attempt by the threat actor to exert pressure on the target organization. This tactic is a core component of double extortion, where attackers not only encrypt a company's systems to disrupt operations but also threaten to release sensitive information to the public to increase the likelihood of a ransom payment.

Details of the alleged incident

According to the announcement made by the Qilin group, the organization was targeted on October 7, 2026. The group claims to have successfully exfiltrated data belonging to the organization and has subsequently made this information public on their leak site. This move serves as a public notification of the alleged compromise.

Regarding the specific details of the breach, the announcement does not provide information regarding the nature of the leaked or threatened data. The available screenshots and information provided by the group do not offer sufficient detail to verify the content of the alleged breach. Therefore, the specific types of files or the volume of information involved remain unconfirmed at this time.

About Eptisa

Eptisa is an international Spanish company that operates within the professional services sector. The firm provides a wide range of engineering, architecture, and consulting services across various industries. Their expertise spans several critical sectors, including infrastructure, the environment, transport, and energy.

The organization specializes in providing technical assistance and project management for a variety of projects. These projects serve both the public and private sectors, making the company a significant player in large-scale technical and consulting operations.

Potential implications and risks

The actions taken by the Qilin group may pose significant risks to the operational continuity of Eptisa. Because the organization is based in Spain, any confirmed data breaches could lead to serious legal consequences under the European Union's General Data Protection Regulation (GDPR), which governs how personal data must be protected and how breaches must be reported.

The use of the double extortion method introduces secondary risks for the organization and its stakeholders. If sensitive data is leaked, it could potentially be used for malicious purposes such as identity theft or highly targeted phishing attacks. Given the established history and past activities of the Qilin group, there is a distinct possibility that the organization's sensitive data could be published or sold on various forums.

Such a situation can result in long-term negative impacts on the organization's commercial reputation and the trust established with their customers. In the professional services sector, where technical integrity and confidentiality are paramount, a breach of this nature can be particularly damaging. Organizations in this sector often focus on robust data protection frameworks, incident response planning, and continuous monitoring to mitigate the risks associated with such sophisticated threat actors.