QILIN Ransomware Targets Multiple Organizations on September 22, 2026

• •Multiple organizations, including The Fifty/50 and Columbus Informatica, were targeted by QILIN ransomware.
• •The Thorndale Foundation confirmed a data breach with evidence published on the dark web.
• •Details on the scope and impact of the attacks remain largely unspecified.

On September 22, 2026, multiple organizations were reported as victims of ransomware attacks attributed to the QILIN group. The Fifty/50, Columbus Informatica, and Textile City were listed on a ransomware leak site, but details regarding the nature of the attacks, including whether data was exfiltrated or systems were encrypted, remain unclear. Each listing lacks specifics about the volume or type of data allegedly obtained and does not mention any ransom demands. In contrast, the Thorndale Foundation, a disability support organization in Australia, confirmed an ongoing investigation into a data breach linked to QILIN, with evidence of compromised documents already published on the dark web. QILIN is noted as a highly active ransomware operation, averaging 100 victim listings per month in 2026. The situation is still developing, and the full impact of these incidents is yet to be determined.