Fujitsu Component (Malaysia) SDN. BHD listed by Qilin ransomware group

• Ransomware group: Qilin
• Country: Malaysia
• Sector: Technology
• Announcement date: December 20, 2025

The Qilin ransomware group has listed Fujitsu Component (Malaysia) SDN. BHD on its leak site, alleging a data breach. This announcement, made on December 20, 2025, marks a significant development in the ongoing targeting of technology sector entities by high-profile threat actors.

The claims made by Qilin

According to the announcement posted on the group's platform, the threat actor known as Qilin claims to have gained unauthorized access to the network of Fujitsu Component (Malaysia) SDN. BHD. The group asserts that this access allowed them to compromise sensitive data belonging to the organization.

This listing appears to be a calculated move as part of the group's established double-extortion strategy. In such scenarios, ransomware actors do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to release stolen data on a public leak site, the attackers aim to exert maximum pressure on the organization to meet their demands.

Details regarding the compromised data

Regarding the specifics of the alleged breach, there is no specific information provided on the leak site regarding the nature of the compromised data. The listing does not specify the volume of files or the total size of the data allegedly stolen.

The listing names no specific data types as being involved in the breach.

About Fujitsu Component (Malaysia) SDN. BHD

Fujitsu Component (Malaysia) SDN. BHD. is a technology company specializing in the manufacturing and sale of electronic components such as relays, keyboards, thermal printers, and touch panels. As part of the global Fujitsu network, the company provides high-quality hardware solutions for industrial and commercial applications.

Analysis and implications for the sector

Qilin is a ransomware-as-a-service (RaaS) group that has been active since 2022. The group is well-known in the cybersecurity landscape for employing double-extortion tactics to increase their success rate. Such an announcement may impact the organization's operational continuity and could lead to the exposure of employee or customer data, depending on the nature of the information involved.

Furthermore, the organization may face legal obligations under Malaysian data protection regulations following such an incident. The compromised data could potentially be utilized for secondary attacks, identity theft, or targeted phishing campaigns against the organization or its partners.

The group's history suggests they may target various sectors, including technology and healthcare. For organizations operating in the technology sector, these types of incidents highlight the necessity of robust defensive measures. Common defensive steps for organizations facing such threats include maintaining rigorous patch management, implementing multi-factor authentication across all access points, and conducting regular offline backups to ensure data integrity and availability.

Because ransomware-as-a-service models allow less technical actors to deploy sophisticated malware, the threat remains persistent. Organizations must remain vigilant against the potential for secondary exploitation of stolen data, which often follows the initial breach and the subsequent public listing on a leak site.