Qilin ransomware group claims Global Holding on its leak site
RansomLook reports the Qilin group listed Global Holding on its leak site, unconfirmed; partners should watch for an official statement before acting.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- No, only a leak-site listing tracked by RansomLook, not confirmed by the victim
What happened
According to a RansomLook headline dated 2026-11-01, the Qilin ransomware group has listed Global Holding on its leak site. RansomLook is a claim tracker. The listing is a claim made by the group. It is not proof of an attack.
Only the headline could be fetched, so the full entry was not reviewed. The following details are not confirmed: which organisation “Global Holding” refers to, what data is involved and how much, how the group says it got in, any deadline or demand, and whether systems were encrypted. Global Holding has not confirmed the incident in any source available here. No independent outlet has verified the claim.
Am I affected?
This is not confirmed. The sources do not name any affected systems, products, customers or data types. If you have a relationship with an organisation called Global Holding, keep in mind that the claim itself is unverified. The identity of the listed entity is also unclear.
What to do now
- Check that you have identified the right organisation. The name “Global Holding” alone may match more than one company.
- Watch for an official statement from Global Holding, and use its own channels to confirm anything you hear.
- Do not download or share any files that may be posted on the leak site.