Point Four EPoS Solutions listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United Kingdom
• Sector: Professional Services
• Announcement date: April 24, 2026

Qilin claims data breach against Point Four EPoS Solutions

The threat actor known as Qilin has listed Point Four EPoS Solutions on its dedicated leak site, alleging that the organization has suffered a data breach. This announcement, made public through the group's leak portal, indicates that the attackers claim to have obtained data belonging to the British technology company. The listing was officially posted on April 24, 2026, and the group claims the attack occurred on the same date.

Ransomware leak sites serve as a platform for cybercriminal groups to exert pressure on their victims. These sites are used to host announcements, countdown timers, and sometimes samples of stolen data to coerce organizations into paying ransoms. When a group lists a victim, it signals a transition from the initial intrusion phase to the extortion phase of a cyberattack.

Details of the alleged incident

According to the information provided by the Qilin group, the organization has been targeted in a cyberattack that resulted in a data breach. The group has published the organization's name on its platform to claim responsibility for the incident. This type of public naming is a hallmark of modern ransomware operations, designed to maximize the reputational damage to the victim.

Regarding the specific nature of the information involved in this incident, there is no specific information regarding the nature of the alleged leaked data in the provided records or the screenshot. The listing names no specific data types.

About Point Four EPoS Solutions

Point Four EPoS Solutions is a British technology company that provides electronic point of sale (EPoS) software and hardware solutions for the retail and hospitality sectors. It helps businesses digitize their inventory management, sales tracking, and operational efficiency processes. Operating within the professional services sector, the company provides essential digital tools that facilitate various business functions for its clientele.

Analysis and potential implications

The Qilin group operates as a Ransomware-as-a-Service (RaaS) entity. Such groups are known for employing double extortion tactics, a method where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This dual-threat approach increases the pressure on victims to comply with ransom demands to prevent the exposure of proprietary or personal information.

Given that the organization is based in the United Kingdom, a potential data breach may trigger legal obligations under the UK GDPR. The exposure of such data could lead to secondary risks for the organization's clients and employees, including identity theft or targeted phishing attacks. Furthermore, considering the group's past activities, it is possible that the leaked data may be fully published if the ransom is not paid.

The organization's operation in the professional services sector may also introduce risks regarding supply chain security. Because companies like Point Four EPoS Solutions provide critical software and hardware solutions to other businesses, a compromise in their systems can potentially impact the security posture of their entire client base. Organizations in this sector often face significant challenges in securing complex digital ecosystems that connect various retail and hospitality operations.

To mitigate such risks, organizations typically focus on robust defensive measures. This includes implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training for employees to defend against phishing. Additionally, maintaining offline, immutable backups and implementing a zero-trust architecture are common industry practices used to enhance resilience against ransomware and data exfiltration attempts.