Qilin Claims Ransomware Attack on Turkey’s Zorlu Holding
Summary
A ransomware.live monitoring post records Qilin’s unverified claim targeting Turkey’s Zorlu Holding, published September 20, 2026. The post does not confirm the group’s claims.
Key points
- The post attributes the claim to the Qilin ransomware actor and names Zorlu Holding in Turkey as the target.
- The claim was discovered and published on September 20, 2026.
- The listed source is a Qilin post on an onion site: hxxp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd[.]onion/site/blog?uuid=51f10216-38bf-4521-a65e-4d8e1cad8cd6.
- The monitoring post says the incident caused data and system disruption, but explicitly states the ransomware group’s claims could not be confirmed.
Article Details
- Victim
- Zorlu Holding
- Claim Date
- 2026-09-20
- Encryption Status
- Unknown
- Exfiltration Status
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- A claim is listed on the ransomware group's blog; victim confirmation and the authenticity or publication of any leaked data are not verified.