Ransomware: qilin claims Radiant (SG) — Not Found

On 14 August 2026, the ransomware group Qilin publicly claimed responsibility for an attack against Radiant (SG), a Singapore-based entity, by listing the organisation on its leak site. The publication, sourced from ransomware.live under the BREACH framework, indicates that the group has either exfiltrated data or is threatening to release it. No technical details, such as the attack vector or the volume of data compromised, were disclosed in the initial notice.

The affected organisation appears to be Radiant (SG), which operates in the financial services or technology sector, though the exact industry is not confirmed. Because Qilin is a known ransomware-as-a-service operator with a history of targeting critical infrastructure and financial institutions, any third-party vendors, clients, or partners connected to Radiant (SG) may also face indirect exposure if shared data was compromised. EU-based entities with business relationships in Singapore or the Asia-Pacific region should treat this as a potential supply-chain risk.

Compliance teams should immediately verify whether their organisation has any data-sharing agreements or vendor dependencies with Radiant (SG). If so, they must assess whether any personal data under GDPR or sectoral rules (e.g., DORA, NIS2) could be affected and prepare breach notification timelines accordingly. Even without a direct link, teams should review their own ransomware preparedness, confirm that backups are isolated and tested, and ensure incident response playbooks align with current threat intelligence on Qilin’s tactics. Monitoring the leak site for actual data publication is also advised, as that would trigger mandatory reporting obligations.