Skip to content
Ransomware

Radiant listed on qilin ransomware leak site

Radiant has been listed on the leak site of the qilin ransomware group.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: qilin
  • Country: United States
  • Announcement date: August 14, 2026

The organization Radiant has been listed on the leak site of the qilin ransomware group. According to the announcement made on August 14, 2026, the group claims that the organization's data has been compromised during a cyberattack.

The qilin ransomware group claim

The qilin ransomware group has officially listed the organization Radiant on its dedicated leak platform. This announcement serves as a claim by the threat actor that they have successfully breached the target and obtained access to its internal information. The group is recognized as a ransomware-as-a-service (RaaS) entity that has been active since 2022.

The qilin group is known for employing double-extortion tactics in its operations. In a double-extortion scheme, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. This allows the attackers to threaten the public release of the stolen information if the ransom is not paid, creating a secondary layer of pressure on the victim organization.

Details regarding the alleged data breach

At this stage, there is no information regarding the nature of the leaked data. The listing does not specify the types of files, the volume of data, or the specific file count involved in the incident. Furthermore, the content of the provided screenshots is not suitable for a detailed analysis, leaving the exact scope of the compromise unknown.

  • No specific data types were named in the listing.

Impact and potential risks

This incident may result in the exposure of data held by Radiant. Due to the double-extortion method utilized by the qilin group, the organization could face significant pressure regarding its operational continuity. If personal data is indeed leaked, it may trigger legal processes under United States state laws.

Beyond the immediate operational disruption, there are several secondary risks associated with such breaches. The leaked data could potentially be used by malicious actors for identity theft or for conducting highly targeted phishing attacks against the organization or its stakeholders. Such attacks often leverage the specific context of the stolen information to increase the success rate of the social engineering attempt.

Strategic considerations for organizations

Given that the qilin group has demonstrated a tendency to target healthcare and other critical sectors, this incident highlights the importance of robust security postures. Organizations facing similar threats may need to re-evaluate their data security protocols to mitigate the risks of exfiltration.

Defensive strategies typically involve implementing strict access controls, enhancing monitoring capabilities to detect unauthorized data movement, and ensuring that data is encrypted both at rest and in transit. Furthermore, maintaining a comprehensive incident response plan is essential for managing the legal and operational fallout that follows a double-extortion event. As threat actors continue to refine their RaaS models, organizations must remain vigilant against the evolving tactics used by groups like qilin.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories