Skip to content
Leak-site post naming Gilco Scaffolding, captured by ThreatCluster

Gilco Scaffolding

qilin

Ransomware leak-site victim intelligence · EN

Views
600
Posted
Sep 13, 2026
Country
GB
Industry
Construction

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

Qilin claims Gilco Scaffolding data has been stolen and published on the group's leak site; the post does not specify the volume or exact files. The victim is Gilco Scaffolding (domain gilcoscaffolding.com) in the construction sector. The leak page was published on 2026-09-13, is labeled Publicated, and shows about 600 views. The page lists WikileaksV2 as a source and includes an onion link.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
gilcoscaffolding.com

What was taken

Gilco Scaffolding

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Source
WikileaksV2 (https://wikileaks2.com/)
Watch data
Watch data (/site/data?uuid=1533a709-2f85-43a0-a314-83dcdd269b2f)
Status label
Publicated
TOX ID label
TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion link in page
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the word "GILCO" in bold white letters on an orange diamond background, with "Gilco Scaffolding Co LLC" in smaller text below.
onion leak page1.2 MB

Negotiation

Tox TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion