LowBreach / campaignMonitoring

Qilin ransomware group claims fzmb GmbH on its leak site

RansomLook reports the Qilin group listed fzmb GmbH on its leak site, unconfirmed by the victim; partners should watch for official notices.

Published
Exploitation
No, only a leak-site claim reported by RansomLook, not confirmed by the victim

What happened

According to a RansomLook headline dated 2026-11-01, the Qilin ransomware group claimed fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie, on its leak site (RansomLook).

A leak-site listing is a claim made by the group. It is not proof of an attack. Only the headline was available, and the full entry could not be reviewed. The following details are not confirmed:

  • Whether fzmb GmbH has confirmed any incident.
  • Whether there is any independent verification of the claim.
  • The entry point, what data may be involved and how much.
  • The timeline beyond the listing date.

Am I affected?

Not confirmed. The source does not name any affected systems, data types, customers or partners. If you have a business or data-sharing relationship with fzmb GmbH, this listing is relevant to you, but the source does not say that anything of yours is affected.

What to do now

  1. Watch for an official statement or notification from fzmb GmbH.
  2. If you exchange data or credentials with the organisation, ask your contact there for confirmation through a known, trusted channel.
  3. Take no action based on files or messages that claim to come from the leak. Treat them as unverified.

Sources