Qilin Ransomware Targets Columbus Informatica and Thorndale Foundation

• •Columbus Informatica was listed as a ransomware victim by Qilin on September 22, 2026.
• •The Thorndale Foundation is investigating a data breach involving sensitive documents published by Qilin.
• •Qilin is currently the most active ransomware group, averaging 100 victim listings monthly.

On September 22, 2026, Columbus Informatica, a technology company in Italy, was listed as a victim of the Qilin ransomware group, although details about the attack remain unclear. The listing on a ransomware leak site did not specify if data was encrypted or exfiltrated. Meanwhile, the Thorndale Foundation, a disability support organization in Australia, is investigating a data breach linked to Qilin, which published sensitive documents including passport scans and confidentiality agreements on the dark web. The Foundation confirmed the breach and reported it to the Australian Cyber Security Centre. Qilin is noted for its high activity, averaging 100 victim listings each month in 2026, and has targeted various organizations since its emergence in 2022. As of now, the full scope of the impact on both organizations is still under investigation.