Skip to content
Bathurst RSL Club Contained Qilin Ransomware Attack

Bathurst RSL Club Contained Qilin Ransomware Attack

First seen 26 Oct 2026, 01:41 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 26, 2026 at 04:43 UTC

The Bathurst RSL Club confirmed it recently contained a cyber security incident linked to the Qilin ransomware group, which listed the club as a victim on October 22. CEO Peter Sargent stated that the club's gaming and membership management systems were not affected, and they are notifying individuals whose personal information was involved. The Qilin group, known for its ransomware-as-a-service model, has claimed over 2,400 victims since its emergence in 2022. The hackers published 30 documents and passport scans related to RSL staff, with further data release expected within two days. The club has engaged cyber security experts and is operating normally while the investigation continues.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-22
Qilin ransomware group lists Bathurst RSL as victim
The Qilin group published details of the Bathurst RSL Club in a leak post, including documents and passport scans.
Cybersecurityconnect.Au
2026-10-26
Bathurst RSL confirms containment of cyber incident
The club's CEO announced that the incident was contained and that operations continue normally while investigations are ongoing.
Cybersecurityconnect.Au

More articles in this cluster (2)

Following this threat?

Track Qilin and Bathurst RSL Club in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What data was compromised?
The Qilin group published 30 documents and passport scans related to RSL staff.
How is the club responding to the incident?
The Bathurst RSL Club has engaged cyber security experts and is notifying affected individuals.
Is the club's operations affected?
No, the club confirmed that it continues to operate normally after containing the incident.