Tong Yang Group listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Taiwan
• Sector: Manufacturing
• Announcement date: October 14, 2025

Qilin ransomware group claims data breach at Tong Yang Group

The Qilin ransomware group has officially listed the Taiwan-based industrial company Tong Yang Group on its dedicated leak site. In the announcement, the threat actor group claims to have successfully exfiltrated sensitive data belonging to the organization. This development follows the group's established pattern of targeting high-value industrial entities to exert pressure through public exposure.

Details of the claimed attack

According to the announcement published on October 14, 2025, the Qilin ransomware group claims to have gained unauthorized access to the systems of Tong Yang Group. The group asserts that this access allowed them to obtain sensitive information from the company's internal environment. This specific listing is viewed as a tactical move within the group's broader strategy of utilizing double-extortion methods.

Double-extortion is a common ransomware tactic where attackers do not merely encrypt a victim's files to disrupt operations, but also steal sensitive data beforehand. By threatening to leak this stolen information on a public platform, the attackers aim to create significant leverage, pressuring the organization to meet ransom demands to prevent the release of confidential information to the public or competitors.

Information regarding the leaked data

At this stage, there is no detailed information available regarding the specific nature or the volume of the alleged leaked data. While the group's announcement may include screenshots containing general information about the company, there is no specific description provided regarding the types of data that have been compromised. The listing does not name any specific data types or categories.

About Tong Yang Group

Tong Yang Group is an industrial company based in Taiwan. Founded in 1952, the organization has a long-standing presence in the manufacturing sector. The company provides a wide range of components for the automotive industry, specializing in the production of automotive plastics, sheet metal, cooling products, motorcycle plastic parts, molds, and paints.

Potential impact and industry implications

The use of double-extortion tactics by groups like Qilin carries significant risks for manufacturing organizations. The exposure of stolen data may result in the loss of trade secrets and critical operational data, which can directly impact a company's competitive advantage in the global market. Furthermore, disruptions to manufacturing processes can occur if the breach affects core operational systems.

Beyond operational and competitive risks, there are significant legal and security implications to consider. If the compromised data includes personal information belonging to employees or business partners, the organization may face various legal obligations and regulatory requirements. The group's history suggests that stolen data can be repurposed for secondary attacks, such as targeted phishing campaigns or further exploitation of the victim's network.

For organizations operating in the manufacturing sector, managing a post-breach process involves navigating complex regulatory landscapes and notifying affected parties. Maintaining robust security postures and complying with local regulations are essential components of managing the fallout from such cyber incidents.