Omrin listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Netherlands
• Sector: Government & Defense
• Announcement date: October 25, 2025

Qilin group claims attack on Omrin

The Qilin ransomware group has listed the Netherlands-based organization Omrin on its dedicated leak site. This announcement, published on October 25, 2025, indicates that the group claims to have carried out a successful ransomware attack against the company. By appearing on their leak site, the group is utilizing its platform to signal that the organization has been compromised.

The group is employing double extortion tactics in this incident. Double extortion is a common ransomware strategy where attackers do not only encrypt an organization's systems to disrupt operations but also steal sensitive information. The threat actors then demand payment in exchange for not releasing the stolen data to the public or the dark web. This method places immense pressure on an organization, as the threat of a public data leak can cause significant reputational and legal damage even if the company can restore its systems from backups.

Details of the claimed data breach

Regarding the specifics of the breach, the announcement provides limited details concerning the actual content of the stolen information. The Qilin group has not provided any specific information on the leak site regarding the nature of the compromised or threatened data. There is no information available regarding the total volume of files or the specific types of data that the group claims to have acquired from Omrin.

Affected data types

• The listing names no specific data types.

About Omrin

Omrin is a waste management company operating in the Friesland region of the Netherlands. The organization provides essential waste collection and processing services to a population of over 1.6 million people. Their operational focus is centered on sustainable waste management and providing solutions for a circular economy.

Risk assessment and industry implications

This incident may pose a risk of exposure for operational data or customer information within Omrin. The double extortion tactics employed by the Qilin group could jeopardize both the organization's operational continuity and data privacy. Because the group is known as a RaaS-based entity—a Ransomware-as-a-Service model—they provide specialized ransomware tools to affiliates, and they have been active since 2022.

As a Netherlands-based entity, a potential data breach may lead to legal sanctions and administrative fines under the General Data Protection Regulation (GDPR). Furthermore, the organization's position in the waste management and defense sector suggests that the breach could create secondary risks and impact supply chain security. When critical infrastructure or service providers in these sectors are targeted, the ripple effects can extend to various partners and government entities.

For organizations operating in similar sectors, maintaining robust security postures is vital to mitigate such risks. Common defensive steps include implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits. Protecting the supply chain and ensuring compliance with regional data protection regulations are also essential components of a modern cybersecurity strategy to defend against evolving ransomware threats.