Integrated Technology Group listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Jordan
• Sector: Technology
• Announcement date: December 20, 2025

Qilin ransomware group claims breach of Integrated Technology Group

The threat actor known as Qilin has listed the Jordan-based organization Integrated Technology Group on its dedicated leak platform. This announcement, made on December 20, 2025, constitutes a claim of a successful cyberattack and subsequent data exfiltration against the technology firm.

Details of the alleged attack

According to the announcement posted by the Qilin group, the attackers claim to have successfully gained unauthorized access to the systems belonging to Integrated Technology Group. The group asserts that this access allowed them to exfiltrate data from the organization's network. While the group has officially added the company to its leak site, the announcement remains limited in scope regarding specific technical details. No specific ransom demand has been disclosed by the group, and there is no information provided regarding the total volume of the compromised data or the specific number of files involved in the alleged breach.

Data involvement and verification

At this stage, the specific nature and content of the compromised data remain unknown. The information provided by the threat actor does not offer sufficient details to verify the exact contents of the alleged breach. The listing names no specific data types or categories of information that have been targeted or stolen.

About Integrated Technology Group

Integrated Technology Group (ITG) is a technology company headquartered in Jordan. Since its founding in 1989, the firm has established itself as a provider of enterprise software solutions and digital transformation services. The organization serves a variety of sectors, including education, government, and healthcare. ITG specializes in providing e-government solutions and management systems specifically designed for the education sector.

Risk assessment and industry implications

The situation involving Integrated Technology Group highlights the ongoing risks posed by ransomware groups that employ double-extortion tactics. In such scenarios, attackers not only encrypt an organization's systems but also steal sensitive data, threatening to publish it on public leak sites to pressure the victim into paying a ransom. This method creates significant risks for the targeted organization, including potential damage to its commercial reputation and serious data privacy concerns for its various clients and business partners.

Because Integrated Technology Group is based in Jordan, this incident may trigger legal proceedings under local data protection regulations. Furthermore, there is a potential risk that any leaked data could be exploited by malicious actors for identity theft or for conducting highly targeted phishing attacks against the organization or its stakeholders. The history of the Qilin group suggests a pattern of targeting critical sectors, including the technology and healthcare industries, which often manage sensitive and high-value information.

For organizations operating within the technology and service sectors, maintaining robust cybersecurity postures is essential to mitigate these types of threats. Common defensive strategies often include implementing multi-factor authentication, maintaining rigorous patch management schedules, and ensuring comprehensive data encryption. Additionally, organizations must prepare for the possibility of data exposure by developing incident response plans that account for both system restoration and the legal and reputational complexities of a data breach.