Qilin ransomware group claims Gandol Doors on its leak site
The Qilin ransomware group claims Gandol Doors on its leak site, per RansomLook; it is unverified, so watch for an official statement before acting.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- No, not confirmed: only a leak-site claim listed by RansomLook
What happened
The Qilin ransomware group claims Gandol Doors as a victim on its leak site, according to a listing tracked by RansomLook on 2026-11-07. A leak-site listing is the group’s own claim, not proof that an attack took place.
Only the RansomLook headline was available. The full entry could not be reviewed. Gandol Doors has not confirmed the claim in any of the sources, and no independent outlet has verified it. The following details are not confirmed:
- whether any intrusion happened
- the entry point
- whether data was taken, and how much
- which systems or people might be affected
Am I affected?
Not confirmed. The sources do not say whether customers, partners or employees of Gandol Doors are affected, or what data, if any, is involved.
What to do now
- Check Gandol Doors’ official channels for a statement confirming or denying the claim.
- If you exchange data or payments with Gandol Doors, be cautious with unexpected messages that refer to this incident until the company says more.
- Revisit this advisory for updates if independent reporting or a statement from the company appears.