Tiger Communications listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United Kingdom
• Sector: Technology
• Announcement date: July 18, 2025

Qilin ransomware group targets Tiger Communications

The Qilin ransomware group has listed the United Kingdom-based technology company Tiger Communications on their dedicated leak site. According to the announcement made on July 18, 2025, the threat actors claim to have successfully exfiltrated data from the organization's systems.

The group has issued a deadline for the organization, stating that if contact is not established by July 25, 2025, the stolen files will be published on their platform. This tactic is a hallmark of modern ransomware operations, where attackers use the threat of public data exposure to pressure victims into meeting their demands.

Details of the claimed data exfiltration

While no screenshots were provided to verify the contents of the stolen data, the Qilin group has made specific claims regarding the nature of the compromised information. The threat actor's note indicates that the breach involves sensitive business documentation. Specifically, the group claims that the following data types have been compromised:

• Customer lists
• Contracts

The group has not provided information regarding the total size of the data stolen or the specific number of files involved in the incident. Furthermore, no ransom demand has been publicly disclosed by the attackers at this time.

About Tiger Communications

Tiger Communications is a technology company that specializes in the development of software designed for communication efficiency. Their product suite includes solutions for call center management, voice recording, and telecommunications analytics. The company provides these specialized tools to help businesses optimize and manage their communication workflows.

Impact and security implications

This incident suggests that the confidentiality of data held by Tiger Communications may have been compromised. The potential exposure of customer contracts represents a significant risk that could damage the company's commercial reputation and create secondary risks for the customers whose information is involved. Because the organization operates within the United Kingdom, this breach may involve violations of data protection obligations under the UK GDPR.

The use of double extortion tactics by the Qilin group is a concerning trend in the current threat landscape. In a double extortion scenario, attackers not only encrypt a victim's data to disrupt operations but also steal sensitive information to use as leverage. The threat of publishing such data can lead to severe consequences, including identity theft or highly targeted phishing attacks against the affected parties.

For organizations operating in the technology and telecommunications sectors, such incidents highlight the critical importance of robust data protection strategies. To mitigate the risks associated with such breaches, organizations typically need to conduct thorough forensic investigations to determine the full scope of the data leak. Defensive measures often include implementing strict access controls, enhancing encryption for data at rest and in transit, and maintaining comprehensive monitoring to detect unauthorized data exfiltration attempts.