Ransomware: qilin claims Century Equities (US) — Financial Services

On 11 July 2026, the ransomware group Qilin publicly claimed responsibility for a cyberattack against Century Equities, a US-based financial services firm. The incident was published on the ransomware group’s leak site, indicating that sensitive data may have been exfiltrated. This event is categorized under the BREACH framework, which typically signals a confirmed data compromise with potential regulatory reporting obligations under GDPR, DORA, or sector-specific US financial regulations.

This development primarily affects financial services organizations in the United States, but EU-based firms with US operations or third-party dependencies should also take note. The financial sector remains a high-priority target for ransomware groups like Qilin, and any breach involving client data or operational systems can trigger cross-border notification requirements under EU digital operational resilience rules.

Compliance teams should immediately verify whether their organization has any direct or indirect exposure to Century Equities or similar US financial entities. Review incident response and breach notification procedures to ensure alignment with DORA and GDPR timelines. Update threat intelligence feeds to monitor for Qilin-related indicators of compromise, and reinforce employee awareness around phishing and credential theft, which are common initial access vectors for this group.