Malgor listed on Qilin ransomware leak site following alleged data breach

• Ransomware group: Qilin
• Country: Puerto Rico
• Sector: Retail & E-Commerce
• Announcement date: October 27, 2025

The Qilin ransomware group has listed Malgor on its dedicated leak site, alleging that the organization has suffered a significant data breach. This announcement, posted on October 27, 2025, marks a new development in the group's ongoing activities targeting various sectors.

The alleged cyberattack and group claims

According to the claims made by the Qilin group, the breach occurred following a cyberattack that allegedly took place on October 24, 2025. The group asserts that they successfully gained access to the organization's internal data during this period. The announcement suggests that various documents related to the company's operations were obtained by the threat actors.

The group's listing serves as a public claim of their intrusion. While the group has published information on their leak site, it is important to note that these claims are made by the threat actors themselves. The group is well-known in the cyber threat landscape for employing double extortion tactics. This method typically involves both encrypting an organization's systems and threatening to release sensitive data on a public leak site to maximize pressure on the victim to pay a ransom.

Data involved in the breach

Regarding the specific nature of the stolen information, the details provided by the group remain limited. While the announcement implies that various operational documents were accessed, the specific types of data contained within those files have not been explicitly identified by the group.

The listing names no specific data types. Although screenshots may have been shared as part of the announcement, the content of these images is blurred, making it impossible to identify the specific categories of data that may have been compromised.

About Malgor

Malgor & Co. is a prominent supplier based in Puerto Rico, with a history dating back to its founding in 1926. The company operates within the retail and e-commerce sectors, specializing in the distribution of food and various miscellaneous consumer goods. Malgor provides a diverse range of products to a wide clientele, offering its own proprietary lines alongside recognized brands through established special distribution agreements.

Risk assessment and industry implications

The situation involving Malgor presents several significant risks. The use of double extortion by groups like Qilin creates a high risk of exposing an organization's trade secrets and sensitive operational data. For a company with a long history and established distribution agreements, the exposure of such information could have lasting consequences.

Because Malgor is a Puerto Rico-based organization, the incident may trigger relevant local data protection regulations and specific legal obligations regarding breach notification and data privacy. Furthermore, the breach introduces secondary risks, such as the potential for the leaked data to be utilized in identity theft or for highly targeted phishing attacks against the company, its partners, or its customers. There is also a possibility of an indirect impact on the organization's broader supply chain partners and its customer base.

In such scenarios, organizations within the retail and e-commerce sectors often focus on strengthening their defensive postures. Common defensive steps include implementing robust multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training for employees to mitigate the risk of initial access. Additionally, maintaining offline, immutable backups and implementing strict network segmentation can help limit the lateral movement of attackers and the potential impact of a successful intrusion.