Qilin ransomware group lists www.officepro.cl on its leak site

• Ransomware group: Qilin
• Country: Chile
• Sector: Professional Services
• Announcement date: September 24, 2025

The Qilin ransomware group has officially listed the Chilean-based organization Office Pro on its leak site. According to the announcement, the group claims to have compromised the systems of the company, leading to the unauthorized access and exfiltration of sensitive information. This listing appeared on the group's platform on September 24, 2025.

The alleged cyberattack event

The Qilin ransomware group claims that the security incident involving Office Pro occurred on August 28, 2025. The group asserts that they successfully gained unauthorized access to the organization's internal systems. Following this access, the threat actors claim to have exfiltrated a variety of sensitive data from the company's infrastructure.

Ransomware groups like Qilin often utilize a method known as double extortion. In this tactic, attackers do not merely encrypt a victim's files to disrupt operations; they also steal sensitive data before the encryption process begins. The threat of leaking this stolen information on a public leak site serves as a secondary layer of pressure, intended to coerce the victim into paying a ransom to prevent the public exposure of their private data.

Claimed exfiltrated data

The announcement made by the Qilin group specifies that several categories of sensitive information were part of the exfiltration. The group claims to have obtained the following types of data:

• Financial data
• Employee personal data
• Customer names
• Shipping addresses
• Bank account details

The disclosure of such specific data types highlights the potential impact of the breach on various stakeholders. When personal and financial information is involved, the risks extend beyond the immediate operational disruption of the target organization.

About Office Pro

Office Pro is a prominent distributor of office supplies located in the Vitacura district of Chile. The organization has a long-standing history in the region, having originally commenced its business operations in 1991 under the name Distribuidora Capri.

Risks and industry implications

The situation involving Office Pro presents several significant risks. For the employees and customers whose data was allegedly stolen, there is an increased risk of secondary attacks, such as identity theft or highly targeted phishing campaigns. These attacks often leverage the stolen personal details to build trust with the victim, making the fraudulent communication appear legitimate.

Furthermore, the organization may face legal liabilities under the data protection regulations established in Chile. Beyond the legal landscape, the potential publication of exfiltrated data by the Qilin group could lead to substantial reputational damage and create vulnerabilities within the broader supply chain. Because distributors like Office Pro are integral to the business operations of their clients, a breach in their systems can have ripple effects across the industries they serve.

In such scenarios, organizations typically face the necessity of initiating formal data breach notification procedures. Informing the affected parties is a critical step in managing the fallout of a breach. Generally, organizations facing these threats should focus on robust defensive measures, such as implementing multi-factor authentication, maintaining strict network segmentation, and conducting regular security audits to mitigate the risk of unauthorized access and data exfiltration.