Wacoal America listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: September 8, 2023

Qilin ransomware group targets Wacoal America

The Wacoal America organization has been listed on the leak site of the Qilin ransomware group. The threat actor claims to have compromised the company's data and has announced its intention to publish information allegedly obtained from the organization's network.

The announcement regarding this incident was made on September 8, 2023. According to the claims made by the Qilin group, the threat actor has exfiltrated a large volume of data from the infrastructure of the company. This type of activity is characteristic of modern ransomware operations, where attackers move beyond simple encryption to focus on data theft to increase their leverage.

Details of the claimed data breach

Regarding the specific contents of the alleged breach, the Qilin group has not provided detailed information concerning the exact nature of the leaked data. While the group has made claims regarding the exfiltration of information, they have not released any screenshots to substantiate the claims at this time. The only specific category of information mentioned in the announcement is:

• Customer data

Because no specific file counts, data sizes, or ransom demands have been disclosed by the group, the full scope of the alleged theft remains unquantified by the source. The lack of detailed documentation or visual evidence means that the exact contents of the data remain unverified beyond the group's initial claim involving customer information.

About Wacoal America

Wacoal America is an apparel company specializing in the design and retail of women's lingerie and intimate wear. The company offers high-quality underwear collections under the Wacoal brand.

Impact and potential risks

This incident may pose significant risks to the customers of Wacoal America, specifically regarding the potential for identity theft and fraud. Given the nature of the organization's sector, if the leaked data contains personal information, it could trigger legal processes under GDPR or other relevant data protection regulations.

The Qilin group utilizes a double-extortion strategy in its operations. This method involves both the encryption of an organization's systems and the threat of leaking sensitive data to force a ransom payment. Such tactics can lead to substantial reputational damage and significant disruption to the company's operational processes. Furthermore, the data targeted in such attacks could potentially serve as a source for targeted phishing attacks in the future, as attackers use stolen information to craft more convincing fraudulent communications.

In general, when organizations face such threats, maintaining robust data protection measures is critical. Defensive strategies often include implementing strong access controls, monitoring network traffic for unusual exfiltration patterns, and ensuring that sensitive customer information is encrypted both at rest and in transit. Organizations in the retail and e-commerce sectors are often targeted due to the high value of the consumer data they maintain.