Inkript listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Indonesia
• Sector: Technology
• Announcement date: September 23, 2026

The Qilin ransomware group claims an attack on Inkript

The technology firm Inkript has been listed on the leak site of the Qilin ransomware group. The announcement, which was created on September 23, 2026, indicates that the group is alleging a successful ransomware attack against the organization. According to the claims made by the threat actors, the group has obtained the firm's data and intends to exert pressure through the use of double extortion tactics.

Double extortion is a common tactic employed by modern ransomware groups to increase their leverage over a victim. In this method, attackers do not merely encrypt a company's systems to disrupt operations; they also exfiltrate sensitive data prior to the encryption phase. The threat actors then threaten to leak this stolen information on public forums or specialized leak sites if the ransom demand is not met. This approach creates a secondary layer of pressure, as the victim faces the risk of public exposure and regulatory scrutiny in addition to the immediate operational downtime caused by the encryption.

Details regarding the alleged data breach

While the Qilin group has officially listed Inkript on its platform, specific details regarding the nature of the allegedly leaked data have not been shared. The group's announcement does not provide information regarding the volume of data stolen or the specific file count involved in the incident. Furthermore, no information has been provided regarding a specific ransom demand or the exact date the initial intrusion occurred, beyond the claim that the attack was associated with the date of the announcement.

The current listing names no specific data types or categories of information that have been compromised. The available evidence provided by the group consists of a screenshot displaying the firm's logo, but there is no accompanying description regarding the actual content of the data. This lack of transparency is a common occurrence in the early stages of a leak site listing, where groups often use the threat of exposure to initiate negotiations.

The organization profile

Inkript is an Indonesia-based technology company specializing in digital security, payment systems, and smart card solutions. The firm provides secure authentication and data management services to both public and private sector organizations.

Potential impact and industry risks

The double extortion tactic employed by the Qilin group may lead to the leakage or publication of the firm's sensitive data. This situation could impact the firm's operational continuity and may result in a loss of trust among its clients. Given that the firm operates in the technology sector, the exposure of intellectual property or customer data may occur, even though the specific content of the data remains unclear at this time.

Secondary risks associated with such a breach may include the use of leaked data for identity theft or targeted phishing attacks. When sensitive information is released publicly, it can be harvested by other malicious actors to conduct highly convincing social engineering campaigns against the organization's employees or its client base. This creates a ripple effect where the initial breach leads to a broader ecosystem of cyber threats.

The past activities of the Qilin group suggest that they may publicly release data if the firm does not pay the ransom. To mitigate these risks, organizations in the technology and security sectors often implement defensive measures such as robust encryption for data at rest and in transit, strict access controls, and comprehensive monitoring of data exfiltration patterns. Maintaining offline, immutable backups is also a critical component of a modern cybersecurity posture to ensure that operational continuity can be maintained even if primary systems are compromised.