ISOPLUS listed on Qilin ransomware leak site following alleged data breach

• Ransomware group: Qilin
• Country: Greece
• Sector: Professional Services
• Announcement date: June 25, 2026

Qilin ransomware group targets ISOPLUS

The Qilin ransomware group has officially listed the organization ISOPLUS on its dedicated leak site. Through this announcement, the threat actor alleges that they have successfully carried out a data breach against the company. This development marks a significant escalation in the group's activities, as they have moved from initial infiltration to publicizing the target on their platform.

The announcement, which appeared on the group's leak site on June 25, 2026, serves as a public notification of the alleged compromise. The group has provided visual evidence to support their claims, including screenshots intended to demonstrate the breach. While the presence of such evidence is a common tactic used by ransomware groups to pressure victims, the specific details within the provided images remain difficult to discern.

Details of the alleged attack

According to the claims made by the Qilin group, the organization was targeted and its systems were compromised on June 25, 2026. The group asserts that they have exfiltrated data from the organization's internal systems. This method of operation is consistent with modern ransomware trends where attackers focus not just on encrypting files, but on stealing sensitive information to use as leverage.

The group is reportedly employing a double-extortion strategy in this incident. In a double-extortion scenario, attackers first steal sensitive data and then demand a ransom to prevent that data from being leaked to the public. This approach increases the pressure on the victim, as the threat of a data leak can cause significant reputational and legal damage, even if the organization has robust backups to restore their systems.

Regarding the specific types of information stolen, the listing does not name any specific data types or categories of information that have been compromised.

About ISOPLUS

ISOPLUS is a company based in Greece that operates within the professional services sector. The organization is primarily involved in the distribution and marketing of various health-related products. Their business model focuses on a wide range of items, specifically including food supplements, vitamins, and other health and wellness products.

Analysis and potential implications

The use of double-extortion tactics by the Qilin group poses a severe risk to the organization. If the group follows its established pattern, there is a high probability that the stolen data will be released publicly if the ransom demands are not met. Such a release could lead to the unauthorized exposure of sensitive information belonging to the company.

Because ISOPLUS is based in Greece, the organization faces significant legal considerations. A confirmed data breach involving personal information could lead to legal consequences under the EU General Data Protection Regulation (GDPR). Beyond the immediate legal risks, the organization may face secondary threats. These include the potential for identity theft or highly targeted phishing attacks directed at both employees and customers of the company.

For organizations operating in the professional services and health sectors, such incidents highlight the importance of comprehensive security frameworks. Defensive strategies typically involve implementing multi-factor authentication, maintaining offline backups, and conducting regular employee training to recognize phishing attempts. Furthermore, robust data encryption and strict access controls can help mitigate the impact of an exfiltration event. As seen in this case, the threat of public disclosure remains a primary driver for ransomware groups to pursue extortion even when traditional recovery methods are available.