Herth+Buss listed on Qilin ransomware leak site following alleged data breach

• Ransomware group: Qilin
• Country: Germany
• Sector: Manufacturing
• Announcement date: April 13, 2026

The Qilin ransomware group has listed the German-based organization Herth+Buss on its dedicated leak site, alleging that the company has been the victim of a data breach. The announcement, which appeared on the group's platform, claims that the threat actor has successfully gained unauthorized access to the organization's internal systems and has exfiltrated data.

Details of the alleged attack

According to the announcement published by the Qilin group on April 13, 2026, the attackers claim to have breached the systems of Herth+Buss. The group asserts that they have successfully stolen various documents related to the organization's internal operations. While the group has publicly announced the attack, the specific details regarding the method of entry or the exact timing of the intrusion remain limited to the group's own claims.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. These sites serve as a public gallery where stolen data is showcased to increase the psychological and reputational pressure on the targeted entity. This tactic is a cornerstone of modern cyber extortion campaigns, designed to maximize the impact of the breach on the victim's business operations and public image.

Data and content involved

The information provided by the Qilin group regarding the specific nature of the stolen files is currently limited. Although the group claims to have compromised various documents related to the company's operations, the actual content of the files has not been clearly identified. The listing includes screenshots, but the content within these images is blurred, making it impossible to determine the specific data types that may have been compromised.

The listing names no specific data types or file categories at this time.

About Herth+Buss

Herth+Buss is a company based in Germany that operates within the manufacturing sector. The organization provides a wide range of solutions for the automotive industry, specifically focusing on spare parts and vehicle electronics. Their product portfolio serves both passenger and commercial vehicles.

The company is known for specializing in electrical components under the Elparts brand. Additionally, they provide a variety of spare parts tailored for Asian vehicle models under the Jakoparts brand. As a key player in the automotive supply chain, the company provides essential components that support the broader manufacturing and automotive ecosystem.

Impact and security implications

The alleged actions taken by the Qilin group could have significant consequences for Herth+Buss. Such an incident may negatively impact the organization's operational continuity and its commercial reputation. Because the company is based in Germany, any breach involving personal information could trigger legal processes under the General Data Protection Regulation (GDPR).

The group appears to be employing double extortion tactics. This method involves not only encrypting a victim's data to disrupt operations but also threatening to leak the stolen information publicly. This approach creates secondary risks, such as the potential for identity theft or the execution of targeted phishing attacks against the organization or its partners. For a company operating in the manufacturing sector, the disclosure of sensitive supply chain data can introduce additional security risks to the broader industry.

In the manufacturing industry, protecting intellectual property and supply chain integrity is vital. Organizations in this sector often focus on implementing robust access controls, continuous monitoring of network traffic, and comprehensive employee training to mitigate the risk of unauthorized access. Furthermore, maintaining a strong incident response plan is a critical defensive step to manage the fallout of a potential breach and ensure business resilience.

Publicly available information regarding the specific capabilities and history of the Qilin group remains limited.