VULNpocalypse
LowBreach / campaignMonitoring

Qilin ransomware group claims Forum as a victim on its leak site

RansomLook reports the Qilin ransomware group listed Forum on its leak site. The claim is unverified, so wait for an official statement from Forum.

Published
Exploitation
No, not confirmed. The only evidence is a leak-site listing tracked by RansomLook.

What happened

According to RansomLook, the Qilin ransomware group listed a victim named Forum on its leak site on 2026-11-01. RansomLook is a claim tracker. The listing is the group’s own claim and is not proof of an attack.

Only the headline could be reviewed. The full entry could not be read, so these details are not confirmed:

  • Which organisation “Forum” refers to.
  • Whether any data was taken or systems were encrypted.
  • The entry point.
  • The data volume.

Forum has not confirmed the claim in the available sources. No independent outlet has verified it.

Am I affected?

Not confirmed. The sources do not identify the organisation, its sector or location, or any affected products, users or data. If you have a relationship with an organisation named Forum, check whether it has published a statement.

What to do now

  1. Treat the listing as an unverified claim until Forum or another reliable source confirms it.
  2. If you deal with an organisation named Forum, watch its official channels for a statement about the incident.
  3. Do not download or share files from the leak site.

Sources