Qilin ransomware group targets mileschristi.org

• Ransomware group: Qilin
• Country: United States
• Announcement date: June 19, 2025

Qilin ransomware group claims data breach at mileschristi.org

The Qilin ransomware group has officially announced that it will publish data belonging to mileschristi.org on its dedicated leak site. This announcement, made on June 19, 2025, follows a claimed attack date of June 18, 2025. The threat actor is utilizing a pressure tactic to force the organization into compliance by threatening the public release of its internal information.

Details of the alleged attack and timeline

According to the announcement posted on the Qilin leak site, the group has added mileschristi.org to its list of victims. The threat actors have issued a specific ultimatum, claiming that all data belonging to the organization will be made available for public download on June 29, 2025. This timeline creates a high-pressure environment for the target organization as the deadline approaches.

In support of their claims, the group has shared various document samples related to the activities of the organization. While these samples serve as evidence of the breach, the exact content and specific nature of these documents remain not clearly defined. The group is employing a double extortion strategy, a common ransomware tactic where attackers not only encrypt an organization's systems but also steal sensitive data to threaten its release if a ransom is not paid.

Data involved in the leak

The listing names no specific data types or file counts, and no specific data size has been provided by the group. However, the presence of document samples suggests that the organization's sensitive information may be at risk.

About mileschristi.org

Miles Christi is a spiritual religious order and community operating within the Catholic Church. The organization is based in the Archdiocese of La Plata, Argentina.

Impact assessment and organizational risks

This alleged leak by the Qilin group may negatively impact the operational continuity and reputation of the organization. The sharing of document samples suggests that the organization's sensitive data may be at risk of exposure. Because the organization is based in the United States, a potential data breach could trigger notification obligations under relevant state laws and federal regulations.

The use of double extortion tactics by the Qilin group is designed to maximize pressure on the victim. If the data is indeed leaked, there is a significant risk that individuals associated with the organization could be exposed to identity theft or targeted phishing attacks. Such attacks often follow data breaches, as malicious actors use the stolen information to craft highly convincing fraudulent communications.

For organizations facing such threats, maintaining robust defensive measures is critical. This includes implementing strong access controls, regular data backups, and comprehensive monitoring to detect unauthorized access. Furthermore, organizations should have established incident response plans to manage the legal and operational consequences of a potential breach, particularly regarding regulatory notification requirements and reputation management.