Qilin ransomware group claims data breach at daispa.it

• Ransomware group: Qilin
• Country: Italy
• Sector: Professional Services
• Announcement date: December 24, 2025

The Qilin ransomware group has officially listed the Italian organization daispa.it on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have compromised data belonging to the firm. This development marks a significant escalation in the ongoing pressure exerted by ransomware groups on their targets through public exposure threats.

The details of the claim

The announcement regarding daispa.it was posted on December 24, 2025. In the listing, the Qilin group alleges that they have successfully infiltrated the organization's systems. The threat actor has explicitly stated that the data belonging to the organization is at risk of being published on their platform. This tactic is a hallmark of modern ransomware operations, where the goal is not merely to encrypt files but to leverage the threat of public disclosure to coerce the victim into meeting specific demands.

By listing a target on a leak site, ransomware groups aim to maximize the visibility of the incident. This method is often used to increase psychological and reputational pressure on the victim organization. While the claim has been made, the specific circumstances surrounding the initial access or the exact nature of the breach remain unverified by the group's public post.

Data and content details

Despite the claim of a successful compromise, the threat actor has been notably vague regarding the specifics of the stolen information. At this time, no details or screenshots regarding the content of the allegedly leaked data have been provided by the Qilin group. Furthermore, the listing does not specify the volume of data involved or the specific file types that have been targeted during the operation.

• The listing names no specific data types.

The lack of immediate evidence, such as file lists or directory previews, is a common occurrence in the early stages of a ransomware leak site announcement. Such information may or may not be released later as part of the group's extortion process.

About daispa.it

DAI S.p.A. is a professional services and consulting firm based in Italy. The company operates primarily in the fields of business processes, management consulting, and digital transformation. Given its role in providing specialized consulting and managing business processes, the organization handles various aspects of corporate operations for its clients.

Risk assessment and implications

This announcement by the Qilin group may indicate a risk of sensitive data exposure for the organization. If a data breach has indeed occurred, the organization may face significant legal and regulatory challenges. Specifically, under the General Data Protection Regulation (GDPR), the organization may face notification obligations regarding the breach of personal data. Furthermore, there is a potential risk of identity theft for the affected data subjects if personal information is leaked.

The group's use of a double extortion method—whereby they threaten to release data in addition to encrypting it—could negatively impact the organization's operational continuity and its professional reputation. Such attacks are designed to create a multi-front crisis involving technical, legal, and public relations challenges.

In the aftermath of such claims, organizations in the professional services sector may also observe targeted phishing attacks against their supply chain partners. Threat actors often attempt to leverage the trust established between a primary organization and its partners to expand their reach. While public information about the Qilin group remains limited, the potential impact of their operations necessitates a high state of vigilance for organizations managing sensitive business processes and digital transformation projects.