Glwholesale.com listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: June 19, 2025

Qilin ransomware group claims data breach at glwholesale.com

The threat actor known as Qilin has listed the retail supplier glwholesale.com on its dedicated leak site. This announcement, made on June 19, 2025, involves an alleged data breach where the group claims to have successfully gained access to the organization's internal systems.

The listing serves as a public notification by the ransomware group, a common tactic used to exert pressure on targeted entities. In these scenarios, threat actors often employ double extortion techniques. This method involves not only encrypting an organization's data to disrupt operations but also threatening to leak sensitive information on a public platform if the ransom demands are not met. By publishing samples of documents, the group aims to demonstrate the validity of their intrusion and increase the psychological and reputational pressure on the victim.

Details of the alleged incident

According to the announcement made by the Qilin group, the group claims to have infiltrated the systems of glwholesale.com. Following this alleged intrusion, the group has published various samples of documents to support their claim of a successful breach. While the group has provided these visual proofs, the full scope and the exact nature of the leaked data remain unknown, as detailed information regarding the complete dataset has not been provided.

Based on the available screenshots provided by the threat actor, the following types of data have been identified as being involved in the leak:

• Commercial invoices
• Corporate documents

The specific volume of data and the total number of files involved in this incident have not been disclosed by the group.

About glwholesale.com

Great Lakes Wholesale Group is a wholesale supplier that manages a diverse range of product categories. Their inventory includes health, beauty, household items, pet supplies, and groceries. The organization operates as a key link in the supply chain, providing merchandise to a variety of clients, including local, national, and international discount stores as well as convenience retailers.

Potential impact and industry implications

This alleged breach could pose significant risks to the organization's ongoing business operations and its established level of customer trust. Because the organization is based in the United States, a confirmed breach could potentially trigger complex legal processes governed by relevant state laws and various data protection regulations. The use of double extortion by groups like Qilin is a growing concern, as the stolen data can be repurposed for secondary attacks, such as highly targeted phishing campaigns against employees or partners.

Furthermore, the organization's supply chain partners could be indirectly affected by this incident, potentially leading to operational disruptions across the network. Given that the Qilin group has been active since 2022 and is known for its pattern of encrypting and leaking data during attacks, such incidents highlight the necessity for organizations to maintain robust security postures. For companies operating in the retail and wholesale sectors, maintaining comprehensive security audits and monitoring for unauthorized access is a critical defensive step to mitigate the impact of such sophisticated threats.