Qilin ransomware group lists moserengineering.com on its leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Manufacturing
• Announcement date: June 15, 2025

Qilin ransomware group claims data breach at Moser Engineering

The Qilin ransomware group has listed moserengineering.com on its dedicated leak site, alleging that the organization has suffered a data breach. This announcement, made on June 15, 2025, marks a new potential incident for the manufacturing sector, as the threat actor group claims to have gained unauthorized access to sensitive corporate information.

According to the announcement published by the group, the attackers have threatened to release the data they claim to have obtained unless the company engages with them through the communication channels they have provided. This tactic is a hallmark of modern ransomware operations, where the threat of public exposure is used to exert pressure on the victim organization.

Details of the alleged incident

The incident was reportedly initiated around June 14, 2025, according to the claims made by the threat actors. While the specific volume of data and the exact number of files involved have not been disclosed by the group, the announcement included several screenshots intended to prove the validity of their claims. These visual proofs suggest that the attackers have accessed internal documentation belonging to the company.

The screenshots shared by the group appear to contain highly sensitive technical and commercial information. Based on the available evidence, the following types of data are reportedly involved in this alleged breach:

• Technical drawings
• Part diagrams
• Commercial documents

The presence of such specific documentation suggests that the breach may target the core intellectual property and operational workflows of the organization.

About Moser Engineering

Moser Engineering is an American company that specializes in the manufacturing and sale of high-performance automotive components. Their product catalog includes high-performance rear-ends, drive-line components, brake systems, and suspension parts. The company is particularly noted for providing custom-made parts designed for racing and performance-oriented vehicles, making their technical specifications and engineering designs highly valuable assets.

Analysis and potential impact

The Qilin group is recognized as a Ransomware-as-a-Service (RaaS) entity that has been active since 2022. They are known for employing double extortion tactics, a method where attackers not only encrypt a victim's data but also threaten to leak it publicly to maximize leverage during ransom negotiations. This approach significantly increases the pressure on organizations, as the risk shifts from mere operational downtime to the permanent loss of intellectual property and reputation.

For a company like Moser Engineering, the alleged theft of technical engineering drawings and part diagrams poses a direct threat to their competitive advantage and trade secrets. Furthermore, because the company is based in the United States, such a breach could trigger complex legal processes involving state-level data protection regulations and various sectoral compliance requirements. Beyond the immediate loss of intellectual property, the exposure of technical data can weaken supply chain security and create vulnerabilities for partners and clients.

The potential secondary risks of such a leak are significant. If the stolen data is published, it could lead to targeted phishing attacks or identity theft. In the manufacturing sector, maintaining the integrity of technical specifications is vital for security and trust. Organizations in this sector often focus on hardening their perimeter, implementing strict access controls for engineering databases, and enhancing monitoring for unauthorized data exfiltration to mitigate these types of risks.