Lasercomb listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Germany
• Sector: Manufacturing
• Announcement date: December 22, 2025

Lasercomb targeted by Qilin ransomware group

The manufacturing company Lasercomb has been listed on the leak site operated by the Qilin ransomware group. This announcement, made on December 22, 2025, marks a new instance of the threat actor targeting industrial entities. The listing serves as a public claim by the group regarding their involvement in a cyberattack against the organization.

Claims of network intrusion and data theft

According to the announcement made by the Qilin group, the attackers claim to have successfully gained access to the internal networks of Lasercomb. The group alleges that this unauthorized access allowed them to exfiltrate data from the organization's systems. This incident is characterized as a ransomware event, following a pattern of behavior observed in modern cybercrime operations.

The group's announcement indicates the continued use of double extortion tactics. In such scenarios, threat actors do not merely encrypt a victim's files to disrupt operations; they also steal sensitive information to use as leverage. By threatening to leak the stolen data on a public platform, the attackers attempt to exert maximum pressure on the victim to meet their demands. This method increases the stakes for the targeted organization, as the threat shifts from operational downtime to the permanent exposure of sensitive information.

Details regarding the alleged data breach

Despite the claims made by the Qilin group, specific details regarding the breach remain limited. At this time, no information has been provided regarding the nature of the allegedly exfiltrated data. Furthermore, the group has not provided any screenshots or visual evidence to substantiate their claims of a successful breach. There is also no information available regarding the total size of the data or the specific number of files that were purportedly taken during the incident.

About Lasercomb

Lasercomb is a German company that specializes in the manufacturing of precision tools used for laser cutting technologies and die-making. The organization focuses on the production of laser-cut dies and related equipment, serving specialized needs within the packaging and printing industries. Given its role in providing precision tools, the company operates within a highly technical manufacturing sector.

Potential risks and industry implications

This incident presents a significant risk of exposure for both employee and commercial data belonging to Lasercomb. Because the organization is based in Germany, any confirmed data breach could lead to serious legal consequences under the European Union's General Data Protection Regulation (GDPR). The use of double extortion by the Qilin group increases the likelihood that data could be published or sold on the dark web to increase pressure on the company.

Furthermore, there is a potential risk that any exfiltrated data could be utilized by malicious actors for identity theft or to launch highly targeted phishing attacks against the organization or its partners. Such attacks often leverage the specific context of the stolen information to appear legitimate, thereby increasing the success rate of the social engineering attempt.

For organizations operating in the manufacturing sector, such incidents highlight the importance of robust defensive measures. Common security practices include maintaining rigorous network segmentation to prevent lateral movement, implementing comprehensive endpoint detection and response (EDR) solutions, and conducting regular backups that are stored offline or in immutable environments. Additionally, maintaining strict access controls and monitoring for unauthorized data transfers can help mitigate the impact of exfiltration attempts. As public information regarding the Qilin group remains limited, organizations must remain vigilant against their evolving tactics.