Qilin ransomware group lists cpshawaii.net on its leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Professional Services
• Announcement date: May 29, 2025

Qilin claims compromise of ControlPoint Surveying, Inc.

The Qilin ransomware group has officially listed the domain cpshawaii.net on its dedicated leak site. Through this announcement, the threat actor claims to have successfully compromised data belonging to ControlPoint Surveying, Inc., a professional services firm based in the United States. This development marks a targeted action by the group against the organization, signaling a potential significant security incident.

The announcement was made on May 29, 2025, with the group claiming the attack occurred on the same day. By listing the company on their platform, the threat actors are employing a double-extortion strategy. This tactic involves not only encrypting an organization's internal systems to disrupt operations but also stealing sensitive data to use as leverage during ransom negotiations. The threat of leaking stolen information serves as a powerful tool to pressure victims into paying the demanded ransom.

Details of the claimed event

According to the information provided by the Qilin ransomware group, the company's data is slated for public release. The threat actor has explicitly stated an intention to make the allegedly stolen data available for download on June 12, 2025. This countdown approach is a common tactic used by ransomware groups to increase psychological pressure on the victim organization.

Regarding the specific contents of the breach, no specific details regarding the nature of the compromised data have been provided. The information available from the group's announcement consists of a screenshot containing text that describes the company's operational areas rather than the specific files or databases that were targeted. Consequently, the listing names no specific data types or file categories.

Organization profile: ControlPoint Surveying, Inc.

ControlPoint Surveying, Inc. is a professional services firm operating within the engineering and surveying industry. The company provides a specialized range of services, including topographic, hydrographic, and cadastral surveying. Their operational footprint is focused on Hawaii and the Pacific Rim, serving a diverse client base requiring precise geographical and engineering data.

Risk assessment and industry implications

Qilin is a known ransomware-as-a-service (RaaS) group that has been active since 2022. The group is recognized for its use of double-extortion tactics to maximize its success rate. For an organization like ControlPoint Surveying, Inc., the potential publication of data could lead to various secondary risks. These include the possibility of identity theft or the execution of targeted phishing attacks directed at the company's employees and clients.

Because the organization is based in the United States, any confirmed data breach may fall under the jurisdiction and scope of various state-level data protection laws and regulations. Such legal frameworks often dictate how companies must report breaches and the penalties they may face for failing to protect consumer data.

Given the established modus operandi of the Qilin group, the company may face significant operational disruptions and potential reputational damage. In the professional services sector, where client trust and data accuracy are paramount, such incidents can have long-lasting consequences. Organizations in this sector typically focus on robust defensive measures, such as implementing multi-factor authentication, maintaining rigorous backup protocols, and conducting regular security awareness training to mitigate the risks posed by ransomware actors.