Qilin Claims Ransomware Attack on Mexico’s XICO

Summary
A ransomware.live post records Qilin’s claim that it targeted XICO in Mexico and encrypted data. The publisher says the claim is unverified.
Key points
- The post attributes the claim to the Qilin ransomware group.
- XICO is identified as the alleged victim in Mexico.
- The group’s onion-site claim was recorded on September 27, 2026: hxxp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd[.]onion/site/blog?uuid=dc126a0f-d8c2-4bee-84ac-31e60c0d895f.
- The publisher says it cannot confirm the claim’s accuracy.
Article Details
- Victim
- XICO
- Claim Date
- 2026-09-27
- Encryption Status
- The ransomware group claimed data encryption; this is unconfirmed by the victim.
- Leak Status
- A group claim was posted; publication of victim data is not reported.
