RANSOMWARE VICTIM
The Switch Enterprises
qilin📅 April 30, 2026
1
linked CVEs
8
same group
Attack Intelligence
The Switch Enterprises was compromised in a ransomware attack attributed to qilin in April 2026. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.
qilin operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Advertising & Marketing
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-0257, which may have been leveraged as initial access vectors or for lateral movement.
Correlated Vulnerabilities (1)
Other Victims — qilin (8)
Bloom Financials
GB · Financial Services
Aug 2026
Akuur Law Firm
TR · Professional Services
Aug 2026
J&T Bank and Trust
US · Financial Services
Aug 2026
STADLER Sensorik CNC-Technik
AT · Manufacturing
Aug 2026
Stade Francais
FR · Hospitality
Aug 2026
Mera Metal
PL · Manufacturing
Aug 2026
RUPP Spritzguss
DE · Manufacturing
Aug 2026
Galvin Brothers
IE · Manufacturing
Aug 2026
Quick Facts
Attack DateApr 30, 2026
Intel Sourceransomlook
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.