Inland and Offshore Contractors listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Trinidad & Tobago
• Sector: Energy & Utilities
• Announcement date: September 18, 2026

The Qilin ransomware group has listed Inland and Offshore Contractors on its dedicated leak platform. The threat actor has published the organization's name in connection with a cyber incident that the group claims occurred on September 18, 2026. According to the announcement made on the leak site, the group claims to have successfully executed a data breach against the entity using double extortion tactics.

The claimed incident

The announcement published by the Qilin ransomware group indicates that the organization was targeted in an attack. The threat actor claims that the incident took place on September 18, 2026. In this specific instance, the group is utilizing a double extortion strategy. Double extortion is a common tactic used by modern ransomware groups, where the attackers not only encrypt the victim's data to disrupt operations but also steal sensitive information to threaten its public release if a ransom is not paid.

By threatening to leak stolen data on a public platform, ransomware groups aim to increase the pressure on the victim organization to meet their financial demands. This method shifts the focus from simple operational disruption to the potential for reputational damage and regulatory scrutiny resulting from the exposure of private information.

Details regarding the alleged leaked data

At this time, there is no information provided regarding the specific nature of the alleged leaked data. While the group has listed the organization on its platform, the content of the provided screenshot is blurred. This lack of clarity makes it impossible to identify specific file types or the volume of information that may have been compromised during the claimed event.

• No specific data types have been identified in the listing.

About Inland and Offshore Contractors

Inland and Offshore Contractors is an energy and utilities company based in Trinidad and Tobago. The organization provides various engineering, construction, and maintenance services specifically tailored for the oil and gas industry.

Implications and sector risks

The Qilin group is known as a ransomware-as-a-service entity that has been operating since 2022. They are recognized for employing double extortion tactics to pressure their targets. This situation suggests that the organization may face the risk of having sensitive data exposed to the public.

A data breach affecting an organization operating within the energy and utilities sector could potentially lead to significant negative impacts on operational continuity. Because these sectors often provide critical infrastructure services, any disruption to their digital or physical processes can have broader implications. Furthermore, the exposure of corporate or personal data may lead to secondary threats, such as identity theft or targeted phishing attacks directed at the organization's employees and customers.

Since the organization is based in Trinidad and Tobago, the incident may lead to potential violations of local data protection regulations, which could result in legal consequences for the entity. Organizations in critical sectors typically focus on robust defensive measures, such as maintaining offline backups, implementing multi-factor authentication, and conducting regular security awareness training to mitigate the risks posed by such sophisticated threat actors.