SEACSUB S.p.a. listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Italy
• Sector: Manufacturing
• Announcement date: December 29, 2025

Qilin ransomware group targets SEACSUB S.p.a.

The Qilin ransomware group has listed the Italian manufacturing company SEACSUB S.p.a. on its dedicated leak portal. According to the announcement made on December 29, 2025, the threat actor claims that data belonging to the organization has been compromised. By publishing the company's name on its leak site, the group is actively creating a threat environment by suggesting that the alleged data may be released to the public.

Ransomware leak sites serve as a platform for cybercriminals to exert pressure on their victims. These sites are used to announce successful breaches and to demand payment in exchange for not releasing stolen information. When a group lists a victim, it often signals the beginning of a high-pressure negotiation phase or the commencement of a public data leak.

Details of the alleged breach

The group's announcement indicates that the organization's data has been targeted. However, regarding the specific content of the alleged leaked data, there is no information provided in the available records or screenshots. The listing does not specify the nature of the files, the volume of the data, or the specific systems that were accessed during the incident.

The listing names no specific data types.

About SEACSUB S.p.a.

SEACSUB S.p.a. is an Italian-based company specializing in the design and manufacturing of diving equipment and underwater sports gear. They offer a wide range of products including snorkels, masks, fins, and wetsuits.

Risk assessment and industry implications

As Qilin is known for utilizing double extortion tactics, there may be a risk of sensitive data being leaked. Double extortion is a common ransomware strategy where attackers not only encrypt an organization's data but also steal it, threatening to publish it online to increase the pressure to pay the ransom. This method significantly increases the impact of a breach, as the organization faces the threat of public exposure regardless of whether they can restore their systems from backups.

Given that the organization is based in Italy, a potential data breach could lead to legal sanctions and notification requirements under GDPR. The General Data Protection Regulation imposes strict rules on how personal data must be handled and requires organizations to report certain types of breaches to authorities. Furthermore, the possibility of employees and business partners being exposed to identity theft or targeted phishing attacks should be considered. Attackers often use stolen credentials or personal information to launch subsequent social engineering attacks against individuals within the victim's network.

Moreover, the disclosure of operational data in the manufacturing sector could impact the organization's competitive edge and create risks for supply chain security. In the manufacturing industry, proprietary designs, production processes, and vendor information are critical assets. If such information is leaked, it can undermine a company's market position and create vulnerabilities for its partners and suppliers. Organizations in this sector often focus on securing their intellectual property and maintaining the integrity of their supply chains to mitigate these risks.

The Qilin group is known as a threat actor active since 2022, targeting various sectors. Their continued activity highlights the ongoing threat posed by sophisticated ransomware groups that employ diverse tactics to target different industries globally.