Ransomware: qilin claims Sisint (PT) — Technology

On July 3, 2026, the ransomware group Qilin publicly claimed responsibility for a breach targeting Sisint, a Portuguese technology firm. The announcement was published on the ransomware group’s leak site, indicating that sensitive data may have been exfiltrated and potentially released unless a ransom is paid. This incident falls under the BREACH framework, which typically involves unauthorized access and data disclosure.

The primary affected organization is Sisint, operating in the technology sector in Portugal. However, under the EU’s General Data Protection Regulation (GDPR), any breach involving personal data of EU residents may also impact clients, partners, and individuals whose data was compromised. The technology sector is a frequent target due to its handling of sensitive intellectual property and customer data.

Compliance teams should immediately verify whether their organization has any data-sharing or service agreements with Sisint. If so, assess potential data exposure and notify the relevant supervisory authority within 72 hours if personal data is involved. Additionally, review incident response plans, ensure ransomware-specific backups are isolated and tested, and reinforce employee training on phishing and credential theft, as these are common initial access vectors for groups like Qilin.