Rss.App

Qilin Ransomware Group Breaches Habib Bank AG Zurich, Stealing 2.5 TB of Data

First seen 18 Nov 2025, 11:14 UTC • •50.1

Article Content

1 / 5

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Habib Bank AG Zurich has been compromised by the Qilin ransomware group, which claims to have stolen over 2.5 TB of data. The breach includes sensitive customer information such as bank account balances, transaction details, and passport numbers, along with the bank's internal tools' source codes.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 212d ago How this analysis works

More articles in this cluster (4)

Threat Graph

9 entities, 20 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Data Breach
DDoS
Malware
Ransomware

Organization (1)

Habib Bank AG Zurich

Threat Actor (4)

DragonForce
Lockbit
Qilin
Qilin Ransomware Group

Relationships

DragonForce uses Data Breach
DragonForce uses DDoS
DragonForce uses Malware
DragonForce uses Ransomware
Lockbit uses Data Breach
Lockbit uses DDoS
Lockbit uses Malware
Lockbit uses Ransomware
Qilin uses Data Breach
Qilin uses DDoS
Qilin uses Malware
Qilin uses Ransomware
Qilin Ransomware Group uses Data Breach
Qilin Ransomware Group uses DDoS
Qilin Ransomware Group uses Malware
Qilin Ransomware Group uses Ransomware
DragonForce targets Habib Bank AG Zurich
Lockbit targets Habib Bank AG Zurich
Qilin targets Habib Bank AG Zurich
Qilin Ransomware Group targets Habib Bank AG Zurich

Following this threat?

Track DragonForce and Habib Bank AG Zurich in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Emerging EDR Killer Tool Targeting Ransomware Groups A new malicious tool, referred to as the EDR killer, is being actively used by at least eight ransomware groups, including Blacksuit and Medusa, to disable endpoint detection and response (EDR) solutions. This tool is believed to be an evolution of the EDRKillShifter developed by RansomHub, which allows ransomware…

DragonForce Ransomware Targets Medical Department Store On September 10, 2026, a Medical Department Store in the United States was attacked by DragonForce ransomware, which has been monitored by Ransomware.live. The attack has raised significant concerns due to the sensitive nature of the healthcare sector, although specific details on the number of affected systems or…