Qilin ransomware group claims Rotstein & Shiffman on its leak site

What happened

According to the claim tracker RansomLook, on 2026-11-06 the Qilin ransomware group listed Rotstein & Shiffman on its leak site.

The listing is the group’s claim, not proof of an attack. Only the headline could be reviewed for this advisory, because the full entry could not be fetched. No outlet independent of the claim tracker has reported on it.

What is not confirmed:

• Rotstein & Shiffman has not confirmed an incident in the available sources.
• There is no independent verification of the claim.
• Whether any data was taken, and if so what kind or how much: not confirmed.
• The entry point, the timing of any intrusion, and whether systems were encrypted: not confirmed.

Am I affected?

Not confirmed. The sources do not name any affected people, data types, systems or partners. If you are a client, employee or supplier of Rotstein & Shiffman, you cannot tell from this listing whether your information is involved.

What to do now

1. Treat the listing as an unverified claim and do not download or share any files the group may post.
2. Watch for a statement or notification from Rotstein & Shiffman directly.
3. Be cautious with unexpected messages that mention this claim or ask for credentials or payment, and verify them through a contact you already trust.

Sources

• RansomLook: Rotstein & Shiffman: claimed by the qilin ransomware group on its leak site