O.Berk listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Manufacturing
• Announcement date: February 18, 2026

The manufacturing company O.Berk has been listed on the leak site of the Qilin ransomware group. According to an announcement made on February 18, 2026, the group claims to have compromised the company's data, marking a potential unauthorized intervention against the organization's digital assets.

The claim by Qilin

On February 18, 2026, the Qilin ransomware group added O.Berk to its dedicated leak site. The group published this announcement as a claim of having successfully compromised the company's data. Such listings on ransomware leak sites are a common tactic used by cybercriminal groups to pressure victims into paying ransoms. These sites serve as a public platform where threat actors post information about targeted organizations to increase visibility and pressure.

The presence of the organization on this site suggests that an unauthorized intervention may have occurred within the company's digital infrastructure. While the listing is a claim made by the threat actor, it indicates a significant security event that could impact the organization's operations and data integrity.

Details regarding the alleged data breach

At this time, no details regarding the specific content of the leaked data have been provided by the threat actor. While the company logo is visible in the screenshot provided by the group, there is no specific information regarding the types of files or their contents. The listing does not specify the volume of data or the specific file count involved in the incident.

The listing names no specific data types or categories of information that have been targeted or exfiltrated.

Potential risks and implications

Given the Qilin group's known use of double-extortion tactics, there may be a risk that the company's sensitive data could be published. Double extortion is a method where attackers not only encrypt an organization's data but also steal it, threatening to leak the information publicly if a ransom is not paid. This tactic is designed to maximize leverage over the victim by threatening reputational damage and legal consequences.

As a US-based entity, a potential data breach could trigger state-level data protection laws and notification requirements. The legal landscape for data protection in the United States involves various state-specific regulations that require companies to notify affected individuals and authorities in the event of a breach. Furthermore, secondary risks may emerge for employees and customers, such as identity theft or targeted phishing attacks, which often follow the exposure of sensitive information.

Based on the group's past activities, there is a possibility that operational continuity could be disrupted and the corporate reputation could be negatively impacted. For organizations in the manufacturing sector, such disruptions can affect supply chains and production schedules. To mitigate such risks, organizations typically focus on robust backup strategies, network segmentation, and continuous monitoring to detect unauthorized access early in the attack lifecycle.