Qilin ransomware group lists www.vdyne.com on its leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Technology
• Announcement date: September 17, 2025

Qilin ransomware group claims breach of VDyne

The Qilin ransomware group has listed the medical device manufacturer VDyne on its dedicated leak site. Through this announcement, the threat actors claim to have successfully exfiltrated data belonging to the organization, marking a significant escalation in their targeting of the medical technology sector.

According to the announcement posted on September 17, 2025, the group claims to have breached the company's network and obtained various sensitive corporate documents. The threat actors allege that the initial breach occurred around September 5, 2025. This listing is a characteristic move by the group, utilizing double-extortion tactics to increase pressure on the victim organization. In such schemes, attackers not only encrypt a company's systems but also threaten to leak stolen data publicly to force a ransom payment.

Claimed data and compromised information

The post made by the Qilin group alleges that a wide range of sensitive information has been compromised. The group claims to have obtained documents related to the company's clinical-stage medical device development processes, which are critical to the organization's operations. Furthermore, the group claims to have access to audit reports and personal data belonging to both employees and investors.

The information allegedly stolen includes:

• Personal data
• Financial documents
• Audit reports
• Operational documents

The threat actors provided screenshots during the announcement, which suggest that financial statements and various operational documents may have been part of the compromised data set.

About VDyne

VDyne is a clinical-stage medical device company. The organization is dedicated to developing transcatheter valve solutions specifically for the treatment of Tricuspid Regurgitation. The company's primary focus involves the development of micro-prosthesis technologies designed to treat this life-threatening medical condition.

Impact and potential consequences

This alleged breach carries significant risks for various stakeholders. The disclosure of sensitive information may expose patients, investors, and employees of VDyne to various threats, such as identity theft or highly targeted phishing attacks. Furthermore, the potential exposure of intellectual property regarding medical device development could result in a substantial loss of competitive advantage for the company.

As a United States-based entity, the incident may trigger various legal and regulatory consequences under HIPAA and other relevant state data protection laws. Given the double-extortion strategy employed by the Qilin group, the risk of the exfiltrated data being further published or sold on the dark web remains significant.

In general, organizations in the medical technology sector face unique challenges when dealing with ransomware. The sensitive nature of clinical development data and personal health-related information makes them high-value targets. To defend against such threats, organizations typically focus on robust network segmentation, continuous monitoring for unauthorized data exfiltration, and strict access controls to protect intellectual property and sensitive personal information.