Qilin Ransomware Claims Formacompany & Co. Real Names Leak, Accuses the Offshore Company of Money Laundering
Published on August 11, 2025
- Bold claim: Qilin ransomware announced the alleged breach of offshore company Formacompany & Co., which has not been confirmed.
- Accusations: The threat actor accuses the company of operating in a gray area, allegedly facilitating money laundering for its customers.
- Data leak: The post on the group’s site claims to include purportedly sensitive documents, including the real names of owners.
Qilin Ransomware claimed responsibility for a targeted Formacompany & Co. data breach on its leak site, which specializes in offshore incorporations, simultaneously implying that its alleged victim may be a gray-area business that offers money laundering services.
Formacompany & Co. provides services associated with creating and managing shell companies, which Qilin asserts could make it an attractive target for cybercriminals seeking financial and corporate intelligence.
Allegations of Stolen Data
The Qilin threat actor claims possession of high-value information, including financial documents, client data, and the actual identities of individuals associated with the company’s offshore activities, and states that this information has been made available.
If this claim holds, the data release could expose wealth management strategies, the identities of shell company owners, and associated financial transactions that have been previously shielded by corporate confidentiality.
According to Qilin’s statement, these documents could implicate what they described as “legal criminals”—a term likely referencing legitimate but controversial financial practices often associated with offshore entities.
Implications and Risks
The potential fallout from this alleged offshore incorporator breach extends beyond financial losses or reputational damage for Formacompany. For affected clients, the exposure poses a threat to confidentiality in industries that rely on discretion.
The release of real names and financial activity could also draw regulatory scrutiny and legal complications, particularly in jurisdictions where offshore entities operate under strict secrecy laws.
Last year, Qilin’s ‘political protest’ cyberattack on the NHS led to one patient's death. In June, the U.S. indicted British cyber kingpin 'IntelBroker.'
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular