Securityaffairs.Co Qilin Ransomware Targets German Political Party Die Linke, Data Stolen
Article Content
- •Qilin ransomware group claims to have stolen data from Die Linke political party.
- •The attack occurred on March 27, 2026, but the party did not confirm a data breach.
- •Die Linke's membership database was not affected, and they are working with authorities.
The Qilin ransomware group has claimed responsibility for a cyber attack on Die Linke, a German political party, asserting that they have stolen sensitive data and are threatening to leak it. The attack occurred on March 27, 2026, prompting Die Linke to disclose a cyber incident, although they did not confirm a data breach at that time. The party, which has 123,000 registered members and 64 representatives in the Bundestag, stated that their membership database was not compromised. Qilin, identified as a Russian-speaking group with financial and political motives, has been linked to previous attacks on political entities in Germany. As of April 1, 2026, Qilin added Die Linke to its data leak site without releasing any data samples. The party has reported the incident to German authorities and is collaborating with IT experts for system recovery. The attack is perceived as part of hybrid warfare targeting critical infrastructure.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Qilin, APT29 and WineLoader in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Atlassian Flaw Exploited Within Hours of Disclosure A vulnerability in Atlassian Data Center products, tracked as CVE-2026-21589 with a CVSS score of 9.3, was within two hours of its disclosure. The flaw allows arbitrary file access and affects multiple products, including Bitbucket, Confluence, and Jira. Exploitation activity targeting honeypot networks began…
Ransomware Groups Exploit Palo Alto VPN Vulnerability CVE-2026-0257 Ransomware groups, including Qilin and Settra, are exploiting a high-severity vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect and Prisma Access products. This authentication bypass flaw allows attackers to create unauthorized VPN sessions, posing significant detection challenges as their…