Susta-stampi listed on qilin ransomware leak site

• Ransomware group: qilin
• Country: Italy
• Sector: Manufacturing
• Announcement date: June 19, 2025

The qilin ransomware group has listed the Italian manufacturing company SUSTA-STAMPI on its leak site. This announcement, made on June 19, 2025, involves a claim of a data breach against the organization. While the group has published a claim regarding the incident, the specific details regarding the volume of data stolen or the specific ransom demand have not been disclosed by the threat actor.

The claimed attack and extortion method

The qilin group has published a claim regarding a data leak involving SUSTA-STAMPI on its platform. According to the announcement, the group is utilizing a double-extortion tactic. In such scenarios, threat actors typically steal sensitive information before encrypting a victim's systems, subsequently threatening to release the stolen data publicly unless a ransom is paid. This method is designed to maximize pressure on the target organization by threatening their reputation and legal standing.

The group's announcement includes various images of documents that are said to belong to the internal operations of the company. These screenshots serve as proof of the breach to pressure the victim. The claim suggests that the attack may have occurred as early as November 18, 2024, though the official listing on the leak site occurred much later.

Data involved in the breach

The screenshots provided by the qilin group as part of their claim display several types of sensitive information. The documents shown appear to be related to the internal business and technical processes of the organization. The specific types of data identified in the leaked samples include:

• Technical drawings
• Production planning data
• Financial documents
• Corporate correspondence

The presence of these specific files suggests that the breach may impact the company's intellectual property and its day-to-day operational documentation.

Organization profile

Susta Srl, operating as SUSTA-STAMPI, is a manufacturing company based in Castellalto, Abruzzo, Italy. The company specializes in the field of industrial molds and manufacturing solutions, providing technical expertise within the industrial sector.

Impact assessment and industry implications

This incident indicates a significant risk of exposure for sensitive commercial and technical data within SUSTA-STAMPI. Because the company is based in Italy, the leak may lead to legal sanctions and administrative fines under the General Data Protection Regulation (GDPR). Furthermore, the use of the double-extortion method by the qilin group could damage the company's commercial reputation and pose secondary risks to its supply chain partners.

The shared samples may be of a nature that could threaten the company's intellectual property rights and operational continuity. For organizations in the manufacturing sector, such incidents highlight the critical importance of protecting technical drawings and production data, as these are central to competitive advantage and operational stability.

In general, organizations facing such threats often focus on defensive strategies such as implementing robust backup solutions, enforcing multi-factor authentication, and maintaining strict access controls to prevent unauthorized data exfiltration. As information about the qilin group remains limited, the incident serves as a reminder of the evolving risks faced by industrial entities in the digital landscape.