RANSOMWARE VICTIMTRANSPORTATION/LOGISTICS

Shipping Services

www.ssa-shipping.com.ar

qilin📍 Argentina (AR)📅 May 8, 2026

linked CVEs

same group

Attack Intelligence

Shipping Services was compromised in a ransomware attack attributed to qilin in May 2026. The organization, operating in the Transportation/Logistics sector in Argentina, was added to the group's data leak site as part of an extortion campaign.

qilin operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Business Services

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-0257, which may have been leveraged as initial access vectors or for lateral movement.

Correlated Vulnerabilities (1)

CVE-2026-0257CRITICALCVSS 9.1⚠ KEV

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

Other Victims — qilin (8)

STADLER Sensorik CNC-Technik

WD Masonry & Concrete

US · Other

Aug 2026

Universitatea De Vest Vasile Goldi Din Arad

RO · Education

Aug 2026

Freedom Claims Management

US · Financial Services

Aug 2026

Quick Facts

CountryArgentina (AR)

SectorTransportation/Logistics

Attack DateMay 8, 2026

Domainwww.ssa-shipping.com.ar

Intel Sourceransomlook

Threat Group

qilin

Motivation: financial

View group profile →

External Links

Leak Site → Screenshot (RansomLook) Google (news) Search CTI.watch

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.

← All Victims·Threat Actors·Vulnerabilities