Skip to content
Leak-site post naming XICO, captured by ThreatCluster

XICO

qilin

Ransomware leak-site victim intelligence

Views
4,451
Posted
Sep 27, 2026
Country
MX
Industry
Building Materials

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

Qilin claims data related to XICO Building Materials was stolen; the leak post on the group's site is listed and has 2,383 views. The victim profile identifies the entity as XICO, with legal name XICO, domain www.xicoled.com, and sector Building Materials. The leak provides no explicit data types or volumes in its description.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

XICO Building Materials

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
WikileaksV2
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the word "XICO" in bold white letters on a black background.
onion leak page55 KB