nPower Technologies listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: India
• Sector: Technology
• Announcement date: March 22, 2026

Qilin ransomware group targets nPower Technologies

The Qilin ransomware group has officially listed the Indian technology firm nPower Technologies on its dedicated leak site. The announcement, which appeared on March 22, 2026, marks a new development in the group's ongoing campaign of targeting various organizations. According to the claim made by the threat actors, the group has successfully compromised the organization's data and is utilizing double extortion tactics to exert pressure on the victim.

Double extortion is a common strategy employed by modern ransomware groups. In this model, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information before the encryption process begins. The threat actors then threaten to release this stolen data on public leak sites if the ransom is not paid. This approach significantly increases the pressure on the victim, as the threat of public exposure of sensitive information can cause lasting reputational and legal damage, regardless of whether the organization can restore its systems from backups.

Details of the claimed attack

The listing created by the Qilin group on March 22, 2026, serves as the primary source for this incident. The group claims to have gained access to the organization's internal data and intends to use this information as leverage. By publishing the organization's name on their leak site, the group aims to signal that the breach is real and that they are prepared to follow through with their threats.

Regarding the specific nature of the information allegedly stolen, there is no clear information regarding the nature of the data allegedly leaked in the screenshot or the records. While the listing includes the organization's name and the specific date the listing was created, it does not provide any details on the actual content of the data or the volume of the files involved. The absence of specific data types or file counts in the public announcement leaves the full scope of the potential exposure unknown at this time.

About nPower Technologies

nPower Technologies is an India-based technology and IT services company. The organization operates extensively in the fields of software development, IT consulting, and digital solutions. Given its role in providing critical IT infrastructure and software services, the organization sits within a sector that handles significant amounts of digital assets and client-facing information.

Assessment and potential impact

The Qilin group is recognized as a Ransomware-as-a-Service (RaaS) entity that has been active since 2022. By operating under a RaaS model, the group provides sophisticated ransomware tools to affiliates, who then carry out the actual attacks, allowing the core developers to focus on maintaining the malware and the leak site infrastructure. This model has allowed the group to maintain a consistent presence in the cyber threat landscape.

The potential leak of the organization's data may lead to the exposure of employee and customer information. Because nPower Technologies is based in India, legal processes may be triggered under relevant local data protection regulations following a confirmed breach. Furthermore, the leaked data could pave the way for secondary risks such as identity theft and targeted phishing attacks, where attackers use the stolen information to deceive employees or clients.

For organizations operating in the technology and IT services sector, such incidents highlight the importance of robust defensive measures. Implementing strict access controls, maintaining offline backups, and conducting regular security audits are standard industry practices to mitigate these risks. Given the group's past activities, it is assessed that the organization's operational continuity may be negatively impacted by this incident.