Village of New Lenox listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Government & Defense
• Announcement date: November 7, 2025

Qilin ransomware group claims breach of Village of New Lenox

The threat actor known as Qilin has listed the Village of New Lenox on its dedicated leak platform. This announcement, made on November 7, 2025, constitutes a claim of a data breach against the local government entity. The group asserts that they have successfully gained unauthorized access to the institution's systems and have obtained data from their environment.

This type of listing is a common tactic used by ransomware operations to exert pressure on their targets. By publicly naming an organization on a leak site, threat actors aim to create reputational damage and force the victim into compliance with their demands. This specific incident highlights the ongoing targeting of public sector entities by sophisticated ransomware groups.

Details of the alleged attack

According to the announcement, the attack was identified on the same day it was posted to the leak site, November 7, 2025. The Qilin group's listing is a significant development for the institution, as it signals a potential compromise of their digital infrastructure. While the group claims to have obtained data, the specific nature and content of the information allegedly exfiltrated remain unknown.

The provided evidence from the leak site includes a screenshot displaying the institution's name and logo. However, the group has not provided specific details regarding the volume of data stolen or the specific types of files that were accessed. At this time, there is no information regarding the total file count, the size of the data, or any specific ransom demands issued by the attackers.

Data involvement

The listing names no specific data types or categories of information that have been allegedly stolen.

About the Village of New Lenox

The Village of New Lenox is a local government entity located in the state of Illinois, United States. As a municipal administrative body, it plays a critical role in the community by providing essential administrative services. Its responsibilities include the management of public safety and the oversight of local infrastructure to serve the residents of the community.

Impact and assessment of the incident

This incident suggests that sensitive public data within the Village of New Lenox may be at risk of exposure. Such attacks on local government entities in the United States can have far-reaching consequences, as they may compromise the privacy of citizen data. Such breaches can potentially trigger legal processes under state-level data protection regulations, adding a layer of regulatory complexity to the incident.

The Qilin group is recognized as a Ransomware-as-a-Service (RaaS) operation that has been active since 2022. They are known for employing double-extortion tactics, a method where attackers not only encrypt an organization's data but also steal it, threatening to leak it publicly if a ransom is not paid. This dual-threat approach increases the pressure on organizations and significantly raises the stakes of a breach. Because of these tactics, the institution may face further risks, such as subsequent data leaks or targeted phishing attacks in the future.

The potential negative impacts on the institution include disruptions to operational continuity and a possible loss of public trust. For organizations in the government and defense sector, maintaining the integrity of citizen information is paramount. Defensive measures often include robust backup strategies, network segmentation, and continuous monitoring to detect unauthorized access early. As threat actors continue to target public infrastructure, the importance of proactive cybersecurity posture and incident response planning remains a critical priority for local governments.