Qilin ransomware group lists diversifiedcpc.com on its leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Manufacturing
• Announcement date: August 25, 2025

Qilin ransomware group claims data theft from Diversified CPC International

The Qilin ransomware group has officially listed Diversified CPC International on its dedicated leak site. Through this announcement, the threat actor claims to have successfully exfiltrated data from the organization, signaling a potential significant breach for the manufacturing firm.

Details of the claimed attack

According to the announcement made on August 25, 2025, the Qilin group asserts that they have targeted Diversified CPC International. The threat actors claim to have gained unauthorized access to the company's internal network, which allowed them to exfiltrate sensitive information. The group is reportedly employing a double-extortion strategy in this campaign. In such scenarios, ransomware actors do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive data and threaten to publish it on public forums or leak sites if a ransom is not paid. This method increases the pressure on the victim by leveraging the threat of public exposure to secure payment.

While the group has made these claims, the specific details regarding the exact content of the exfiltrated data have not been provided by the attackers. However, the group has provided evidence in the form of screenshots which display various document samples, suggesting that the stolen material includes various types of documentation.

Organization profile

Diversified CPC International is an American company that serves as a world leader in the development, manufacture, and distribution of aerosol propellants, hydrocarbon refrigerants, and biomass solvents.

Impact assessment and industry implications

The actions taken by the Qilin group could have several negative consequences for the organization. Such an incident may negatively impact the company's operational continuity and its commercial reputation. Because the group is utilizing the double-extortion method, the potential leakage of sensitive data could lead to secondary risks, such as identity theft or targeted phishing attacks against the company or its stakeholders.

As a United States-based company, the potential leakage of data may result in legal consequences under state-level data protection laws and various sectoral regulations. Furthermore, given the historical activities of the Qilin group, it is assessed that this attack may also exert pressure on the broader supply chain. This is particularly relevant for companies in the manufacturing sector, where disruptions can ripple through various partners and distributors.

Qilin is a Ransomware-as-a-Service (RaaS) based group that has been active since 2022. The group is known for targeting various sectors, including the healthcare industry. In general, organizations in the manufacturing sector can defend against such threats by implementing robust network segmentation, maintaining rigorous patch management protocols, and conducting regular employee training to recognize phishing attempts. Strengthening incident response plans and ensuring offline, immutable backups are also critical defensive steps to mitigate the impact of ransomware and data exfiltration attempts.