Nissan CBI targeted in alleged data breach by Qilin ransomware group

• Ransomware group: Qilin
• Country: Japan
• Sector: Manufacturing
• Announcement date: August 21, 2025

The Qilin ransomware group has posted an announcement on its dedicated leak site claiming to have compromised data belonging to Nissan CBI. According to the post, the threat actor has successfully targeted the design studio, asserting that they have obtained various files from the institution's internal design network.

The alleged cyberattack event

The announcement published by the Qilin group is associated with a cyberattack that allegedly occurred on August 20, 2025. The threat actor claims to have gained access to the institution's network, leading to the alleged exfiltration of sensitive information. This type of activity is characteristic of modern ransomware operations, where attackers focus on data theft to increase their leverage over the victim.

Ransomware leak sites serve as a platform for cybercriminals to pressure organizations into paying ransoms. By publishing stolen data, these groups aim to cause maximum reputational and operational damage. This specific incident involves a claim of a data breach rather than a simple encryption event, indicating that the focus of the attackers was the theft of information from the design network.

Claimed data and affected information

The Qilin group claims that the stolen information includes a variety of sensitive materials essential to the organization's operations. Based on the announcement, the leaked content is said to consist of several types of files, including design drawings, project documents, photos, and videos. Visual samples provided in the announcement appear to be related to automotive designs, suggesting the sensitive nature of the stolen intellectual property.

The specific types of data mentioned in the claim include:

• Design drawings
• Project documents
• Visual media files

While the group has provided visual samples, no specific information was given regarding the total size of the data or the exact file count involved in the breach. Additionally, there was no mention of a specific ransom demand in the public announcement.

About Nissan CBI

Nissan CBI, also known as Nissan Creative Box, is a specialized design studio operating under the Japanese automaker Nissan. Located in the Harajuku district of Tokyo, the institution functions as a vital design development center within Nissan's broader global design network. As a hub for creative development, the studio handles critical assets related to the brand's visual and structural identity.

Impact and industry implications

This alleged leak by the Qilin group may pose a significant risk to the institution's intellectual property and trade secrets. The exposure of design data could lead to a loss of competitive advantage and the disclosure of strategic projects. Given the nature of the automotive industry, where design is a primary differentiator, the loss of such data is highly impactful. Furthermore, there is a possibility that the leaked data could be utilized in secondary attacks or corporate espionage activities.

The Qilin group is known for utilizing a double-extortion method. In this model, attackers not only encrypt an organization's systems but also steal sensitive data, threatening to release it publicly to exert maximum pressure on the victim. The publication of data is a key component of this tactic, designed to force the organization into compliance through the threat of public exposure.

The exposure of such sensitive information may also lead to legal complications. The institution may face legal processes under Japan's data protection regulations and sectoral confidentiality obligations. For organizations in the manufacturing and design sectors, such incidents highlight the critical need for robust data protection frameworks and strict access controls to safeguard intellectual property from sophisticated threat actors.