Qilin ransomware group claims Roxfarma on its leak site
RansomLook reports the Qilin ransomware group listed Roxfarma on its leak site; unconfirmed, so Roxfarma partners should watch for an official statement.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- No, only a leak-site claim reported by RansomLook, not confirmed by the victim
What happened
According to RansomLook, the Qilin ransomware group has claimed Roxfarma on its leak site. RansomLook recorded the listing on 2026-11-07 (RansomLook).
This advisory is based on the headline only. The full entry could not be reviewed. A leak-site listing is a claim made by the group and does not prove that an attack took place. The available source does not show that Roxfarma has confirmed any incident. There is no independent verification. The entry point, any data involved and the volume of data are not confirmed.
Am I affected?
Not confirmed. The source does not say which systems, data or people might be involved, if any.
What to do now
- Watch for an official statement from Roxfarma before acting on the claim.
- If you have a business relationship with Roxfarma, use your usual contacts at the company to ask about any notice they have issued.
- Treat any files said to come from this listing as unverified.