Ransomware: qilin claims Lercher Werkzeugbau (AT) — Manufacturing

On August 14, 2026, the ransomware group Qilin publicly claimed responsibility for an attack on Lercher Werkzeugbau, an Austrian tool and mold manufacturer. The claim was published on the ransomware.live data leak site, which tracks such incidents. This is not a regulatory change but a confirmed cyber incident disclosure, meaning the breach has been made public and the threat actor has likely exfiltrated data.

The affected organization is Lercher Werkzeugbau, operating in the manufacturing sector, specifically precision tooling and mold making. However, the impact extends to its supply chain, including automotive, aerospace, and industrial clients who rely on its components. Any third-party vendors or partners with shared data systems may also face exposure. For EU compliance professionals, this signals a heightened risk for similar mid-sized manufacturers, which are often targeted due to weaker security postures.

Compliance teams should immediately verify whether their organization has any business relationship with Lercher Werkzeugbau and assess data-sharing agreements. If so, initiate incident response protocols, including notifying relevant data protection authorities under GDPR if personal data is involved, and review contractual breach notification clauses. For all manufacturing clients, this is a prompt to re-evaluate ransomware defenses, particularly around network segmentation, offline backups, and employee access controls. Monitor Qilin’s leak site for any published data that may affect your operations.