FLOE International listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Manufacturing
• Announcement date: June 3, 2025

The Qilin ransomware group has listed FLOE International on its dedicated leak site, claiming to have obtained and subsequently published data belonging to the organization. This announcement, made on June 3, 2025, suggests a significant security incident involving the manufacturing firm.

Details of the claimed attack

According to the claims made by the threat actor, the unauthorized access to the organization's systems occurred on May 30, 2025. Following this alleged incident, the Qilin group published the organization on its platform. The group appears to be employing a double-extortion tactic, a method where attackers not only encrypt an organization's data but also threaten to release sensitive information to the public to increase pressure for ransom payments.

In such scenarios, ransomware groups typically use the threat of data exposure as leverage. By moving from simple encryption to the public release of stolen information, these actors aim to maximize the reputational and legal impact on the victim. While the specific mechanics of the initial breach have not been detailed, the subsequent publication of data is a hallmark of this high-pressure extortion strategy.

Data involved in the incident

The information released by the threat actor includes samples of various documents that allegedly belong to FLOE International. Based on the available evidence, the following types of data are identified as being affected:

• Identity documents
• Corporate records

The presence of these document types in the leak suggests that the breach may have compromised sensitive internal information and personal identification details. The specific volume of data and the total file count have not been disclosed by the group.

About FLOE International

FLOE International is an American company that specializes in the manufacturing of marine equipment. The company's product line includes aluminum docks, boat lifts, and various types of trailers. They are specifically recognized for their expertise in modular dock systems and various marine-related equipment.

Risk assessment and industry implications

This incident may pose a significant risk of exposure for the personal data of employees or customers within FLOE International. Because the organization is a US-based entity, the breach could lead to legal scrutiny under federal regulations as well as various state-level data protection laws. The use of double-extortion tactics by the Qilin group—an actor known to be active since 2022 and targeting various sectors—increases the potential for secondary risks, such as identity theft and targeted phishing attacks, following the release of the data.

Furthermore, the organization's supply chain partners may also be indirectly affected by this incident. When a manufacturer in a specialized sector like marine equipment is compromised, the interconnected nature of modern industrial supply chains can create ripple effects throughout the industry. Organizations in similar sectors often face increased risks of targeted phishing and identity theft when sensitive corporate and personal records are leaked.

To mitigate such risks, organizations typically focus on robust defensive measures. These include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training to defend against phishing. Additionally, maintaining offline backups and implementing strict network segmentation can help limit the lateral movement of attackers and the potential impact of a ransomware event. As the Qilin group continues to target various sectors using similar methods, maintaining a strong cybersecurity posture remains a critical priority for manufacturing entities globally.