LowBreach / campaignMonitoring

Qilin ransomware group claims Gandol Doors on its leak site

The Qilin ransomware group claims Gandol Doors on its leak site, per RansomLook; it is unverified, so watch for an official statement before acting.

Published
Exploitation
No, not confirmed: only a leak-site claim listed by RansomLook

What happened

The Qilin ransomware group claims Gandol Doors as a victim on its leak site, according to a listing tracked by RansomLook on 2026-11-07. A leak-site listing is the group’s own claim, not proof that an attack took place.

Only the RansomLook headline was available. The full entry could not be reviewed. Gandol Doors has not confirmed the claim in any of the sources, and no independent outlet has verified it. The following details are not confirmed:

  • whether any intrusion happened
  • the entry point
  • whether data was taken, and how much
  • which systems or people might be affected

Am I affected?

Not confirmed. The sources do not say whether customers, partners or employees of Gandol Doors are affected, or what data, if any, is involved.

What to do now

  1. Check Gandol Doors’ official channels for a statement confirming or denying the claim.
  2. If you exchange data or payments with Gandol Doors, be cautious with unexpected messages that refer to this incident until the company says more.
  3. Revisit this advisory for updates if independent reporting or a statement from the company appears.

Sources