Prelco.ca listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Canada
• Sector: Manufacturing
• Announcement date: March 9, 2025

Qilin group claims attack on Prelco.ca

The Qilin ransomware group has listed the Canadian organization Prelco.ca on its dedicated leak site. Through this announcement, the threat actor group claims to have conducted a ransomware attack against the company and has threatened to publish the organization's data.

According to the announcement made on March 9, 2025, the group states that it intends to publish the organization's data on March 15, 2025. The group's claim regarding the attack suggests a potential threat to the organization's manufacturing operations. While the group has posted the organization's name on its platform, the specific details surrounding the nature of the breach remain limited to the group's claims.

Data and impact details

Regarding the specific information involved in this incident, the group has not provided details regarding the content of the leaked data. Furthermore, the screenshots associated with the listing do not provide sufficient information to verify the content of the data claimed to be stolen.

• No specific data types were identified in the listing.

The lack of information regarding the volume of data, the specific file count, or the specific ransom demand means that the full scope of the breach cannot be determined from the available source information. The group's announcement focuses primarily on the threat of publication rather than the specifics of the exfiltrated information.

About Prelco.ca

Prelco Inc. is a manufacturer of high-performance and specialty glass for architectural applications, specialized vehicle glazing, and glass components for the manufacturing sector. Based in Canada, the company provides customized glass solutions for various industrial needs.

Analysis and industry implications

This incident may negatively impact the organization's operational continuity and commercial reputation. Because the organization is a Canada-based entity, potential data breaches may trigger legal obligations under PIPEDA regulations. The use of double extortion tactics by the Qilin group may increase the risk that leaked data could be utilized in secondary attacks or activities such as identity theft. The organization's involvement in the manufacturing sector may also pose risks to supply chain security.

The Qilin group, which has been active since 2022, operates under a ransomware-as-a-service model. This model allows various affiliates to use the group's infrastructure to conduct attacks, which can complicate defensive efforts. In such scenarios, organizations often face the challenge of double extortion, where attackers not only encrypt systems to disrupt operations but also steal sensitive data to use as leverage for ransom payments.

For organizations operating within the manufacturing sector, these types of threats highlight the importance of securing the supply chain. A breach in one manufacturer can potentially create ripple effects throughout a network of partners and clients. To defend against such threats, organizations typically focus on robust backup strategies, network segmentation, and continuous monitoring to detect unauthorized movements within the environment. Furthermore, maintaining compliance with regional data protection regulations is essential for managing the legal risks associated with potential data exposure.