Qilin ransomware group lists kinematica.ch on its leak site

• Ransomware group: Qilin
• Country: Switzerland
• Sector: Technology
• Announcement date: February 24, 2024

Qilin ransomware group claims data breach at kinematica.ch

The threat actor known as Qilin has listed the Swiss organization kinematica.ch on its dedicated leak site. This announcement, made on February 24, 2024, involves an allegation of a data breach targeting the institution. The group claims to have successfully gained unauthorized access to the organization's network and subsequently exfiltrated data.

This alleged cyberattack appears to specifically target the technology and research development operations of the institution. While the listing has been made public on the group's platform, the claim remains an allegation by the threat actor. The group's historical activities are noted as a potential factor that could increase the severity of such an incident.

Details of the alleged attack

According to the information provided by the threat actor, the unauthorized access to the network is linked to an event that allegedly took place on February 15, 2024. The group's announcement focuses on the breach of the organization's infrastructure and the theft of information. However, the group has not provided specific details regarding the volume of data taken or the specific files involved.

Regarding the content of the breach, the listing names no data types. No screenshots or detailed information regarding the nature of the leaked data have been provided by the group. Consequently, the specific categories of information that may have been accessed remain unknown at this time.

About kinematica

Kinematica is a technology company based in Switzerland. The organization specializes in homogenization, dispersion, and mixing technologies. Their expertise includes the development of equipment designed for both industrial and laboratory scales. Through research and development-focused projects, the company provides innovative solutions for several critical sectors, including the food, chemical, and pharmaceutical industries.

Implications and risks of double extortion

The use of double extortion tactics by the Qilin group suggests that the organization may face a significant risk of sensitive data publication. In such scenarios, threat actors not only encrypt systems but also steal data to use as leverage for ransom demands. This specific type of attack can have profound consequences for an organization's intellectual property and trade secrets.

Given that the organization is located in Switzerland, any potential data breach may fall under the regulatory scope of the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR). The exposure of data can lead to various legal and compliance implications for the entity involved.

Beyond the organization itself, there are secondary risks for external parties. Clients and business partners of the institution may be exposed to risks such as identity theft or targeted phishing campaigns if their information is compromised. To mitigate these risks, organizations in the technology and research sectors often focus on robust network monitoring, strict access controls, and comprehensive data encryption to protect sensitive intellectual property and maintain compliance with international data protection standards.