Iberia Compositech Manufacturing listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Spain
• Sector: Manufacturing
• Announcement date: September 25, 2026

The Qilin ransomware group has officially listed the Spanish manufacturing firm Iberia Compositech Manufacturing on its dedicated leak portal. According to the announcement made on September 25, 2026, the threat actors claim that data belonging to the organization has been compromised during a cyberattack.

The details of the claim

The threat actor, identified as the Qilin ransomware group, published the listing on their leak site on September 25, 2026. The group claims that the attack took place on the same day the announcement was posted. While the listing confirms the organization's presence on the portal, the specific details regarding the nature of the breach remain limited to the group's assertion that the organization's data has been compromised.

Ransomware leak sites serve as a platform for cybercriminals to pressure victims into paying ransoms by threatening to release sensitive information. These sites often feature a countdown timer or a public list of victims to increase psychological pressure. In this instance, the Qilin group has added Iberia Compositech Manufacturing to their public directory of targets.

Data involved in the incident

Regarding the specific contents of the alleged breach, there is no information regarding the nature of the allegedly leaked data in the provided registration details or screenshots. The listing does not specify the types of files, the volume of data, or the specific categories of information that the threat actors claim to have exfiltrated.

Affected data

• No data types were specified in the listing.

Organization profile

Iberia Compositech Manufacturing is a company based in Spain. The organization specializes in the production of composite materials and various industrial manufacturing solutions. Their primary focus involves producing specialized parts for the automotive and industrial sectors.

Potential impact and industry context

This incident may pose a risk to Iberia Compositech Manufacturing regarding data privacy and operational continuity. Because the Qilin group is known to employ double extortion tactics, there is a possibility that the organization's trade secrets or employee data could potentially be exposed. Double extortion is a common ransomware tactic where attackers not only encrypt a victim's systems but also steal sensitive data, threatening to leak it publicly if the ransom is not paid. This method significantly increases the pressure on organizations to comply with demands.

As the company is based in Spain, a potential data breach could lead to legal sanctions and administrative fines under the General Data Protection Regulation (GDPR). Furthermore, the leaked data might be used for identity theft or targeted phishing attacks against the organization or its partners. The Qilin group is recognized as a Ransomware-as-a-Service (RaaS) operation that has been active since 2022, targeting various sectors including healthcare.

For organizations operating within the manufacturing sector, such incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps for organizations include maintaining offline backups, implementing strict access controls, and conducting regular security audits to identify vulnerabilities. Protecting intellectual property and maintaining operational continuity are critical priorities for companies involved in complex industrial supply chains.