dgr.at Listed by qilin Ransomware Group

On April 4, 2025, the ransomware group Qilin added dgr.at to its leak site and announced that all exfiltrated internal files would become available for public download on 14 April 2025.

Reported Details of the Incident

Public reporting indicates the company, which provides the ERP solution PROFI.neo for building services, electrical, plumbing, heating, ventilation and air conditioning installation firms, suffered a ransomware attack. The attackers claim to have exfiltrated internal files and have set a firm deadline of 14 April 2025 for the data to be released on their leak site. The exact number of people whose information is contained in the files remains unknown, but the nature of an ERP system used by trade businesses means employee records, customer details, supplier contracts and financial documents are likely included.

Available reporting describes the incident as a classic ransomware double-extortion case: encryption of systems followed by theft of data and the threat of public release. No independent verification of the stolen data volume has been published yet.

Why This Matters for You and Your Family

When a company that handles installation contracts, billing records and service schedules is breached, the information inside can easily contain your personal data. If you or your family have used an HVAC, plumbing or electrical firm that relies on PROFI.neo, your address, phone number, email, payment details or even children’s names linked to service accounts may now sit in files scheduled for public release. Once that data appears on a ransomware leak site it spreads quickly to other criminals who combine it with information from earlier breaches.

Credential leaks from business systems often cascade into personal account takeovers. A reused password taken from a work-related ERP file can open the door to your email, banking or online shopping accounts. For families this risk extends to children’s gaming accounts that frequently share the same email address or phone number listed in household service records.

The Doxxing and Identity-Chain Risk

Ransomware groups do not stop at dumping files. Once data appears on their leak site, it is scraped by dozens of automated services that link email addresses to usernames, phone numbers to home addresses, and online handles to real identities. What begins as a business record can rapidly become a complete profile that includes your children’s gaming tags, social-media accounts and school-related details. These identity chains make targeted harassment, SIM-swapping and financial fraud simpler for criminals.

Public reporting shows that information released on Qilin’s site frequently resurfaces on other criminal marketplaces within days, multiplying the exposure.

Qilin’s Publicly Known Track Record

Public reporting attributes the Qilin ransomware group (also known as Agenda) as having emerged in 2022. The group has targeted organisations across healthcare, education, manufacturing and professional services. Notable prior victims include several mid-sized European and North American companies whose employee and customer data were published after ransom demands were refused. Their typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files, deployment of ransomware to encrypt systems, and then extortion via both ransom demands and the threat of leaking data on their dark-web site. Qilin often sets short deadlines similar to the 14 April 2025 date given to dgr.at.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles and real identity so you know exactly what exposure looks like before the April 14 deadline.
• Rotate any password you used at dgr.at or related service providers anywhere it has been reused, and switch on two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught and acted on within hours.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts which often chain back to the same addresses and emails now at risk.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The April 14 deadline set by Qilin is a clear reminder that your family’s information can appear in places you never expected. Acting before the files are released gives you the best chance to limit damage. Start your DoxxScan trial today for continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. DoxxScan by GalaxyWarden is also effective for protecting gaming accounts because credential leaks like this one frequently cascade into account takeovers and doxxing chains.