Skip to content
Ransomware

Quaser Machine Tools, Inc. listed on Qilin ransomware leak site

Taiwan-based manufacturing company Quaser Machine Tools, Inc. has been listed on the leak site of the Qilin ransomware group.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Qilin
  • Country: Taiwan
  • Sector: Manufacturing
  • Announcement date: June 25, 2025

Qilin ransomware group claims breach of Quaser Machine Tools, Inc.

The Qilin ransomware group has listed the Taiwan-based manufacturing company Quaser Machine Tools, Inc. on its dedicated leak site. According to the announcement posted on June 25, 2025, the threat actors claim to have successfully breached the organization's networks and exfiltrated a significant amount of sensitive information.

The group asserts that the cyberattack occurred on June 11, 2025. Following the breach, the threat actors have threatened to publish the institution's sensitive data if their demands are not met. To demonstrate the validity of their claims, the group has shared several screenshots on their leak site, which allegedly contain internal correspondence and various technical documents belonging to the company.

Details of the claimed data exfiltration

The Qilin group claims to have obtained approximately 2TB of data during the incident. While the total file count and the specific ransom demand have not been disclosed by the group, the announcement specifies several categories of sensitive information that have allegedly been compromised. The stolen data is reported to include a wide range of corporate and technical records.

The specific types of data mentioned in the claim include:

  • Customer information
  • Production department data
  • R&D data
  • Internal correspondence
  • Quality control reports

The breadth of this data suggests that the breach may impact multiple facets of the company's operations, ranging from administrative functions to core research and development activities.

About Quaser Machine Tools, Inc.

Quaser Machine Tools, Inc. is a manufacturing company based in Taiwan. The organization specializes in the design and production of CNC machine tools. Their product portfolio includes vertical and horizontal machining centers, alongside various other industrial manufacturing solutions intended for diverse industrial applications.

Analysis and potential impact of the incident

The Qilin group is known for employing double extortion tactics. In such scenarios, threat actors not only encrypt an organization's systems to disrupt operations but also steal sensitive data to use as leverage. By threatening to leak the information publicly, the group attempts to pressure the victim into paying a ransom to prevent the exposure of proprietary and private information.

This specific leak poses several significant risks to Quaser Machine Tools, Inc. The exposure of R&D data and technical documents could jeopardize the company's intellectual property and trade secrets. Furthermore, the release of such information could create negative impacts across the company's supply chain. From a legal perspective, the company may face potential liabilities under the data protection regulations established in Taiwan.

There are also significant risks to individuals associated with the firm. The content of the shared data may increase the risk of employees and customers being exposed to identity theft or targeted phishing attacks. Given the group's past activities, the leaked data may be utilized for broader threats in the future.

In the manufacturing sector, organizations often face high stakes due to the value of their intellectual property. To defend against such threats, companies typically focus on implementing robust network segmentation, enhancing monitoring for unauthorized data exfiltration, and maintaining rigorous access controls for sensitive R&D and production environments. Additionally, regular security awareness training is a common defensive step to mitigate the risk of phishing-based initial access.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories