Krusell Listed by qilin Ransomware Group

On July 21, 2025, Thai leather goods manufacturer Adiantes was listed on the leak site of the qilin ransomware group, with the attackers claiming to have exfiltrated internal files following a ransomware incident at the company.

What's Publicly Reported from Reporting

Adiantes, based in Thailand, produces premium sustainable leather products including handmade handbags, belts, and accessories using traditional craftsmanship and bespoke design. Public reporting indicates the company was hit by a ransomware attack, after which qilin posted details of the incident on its leak site. The exact number of records exposed remains unknown, and the specific types of internal files have not been publicly detailed beyond the general description of exfiltrated corporate data. The listing appeared on the qilin leak portal, which is tracked by ransomware monitoring services such as ransomware.live.

Why This Matters for You and Your Family

When a company like Adiantes suffers a breach, the information stolen can include supplier lists, customer details, employee records, or financial documents that contain personal data belonging to ordinary people. If your name, address, email, phone number, or payment information appears in those files, it can be sold or published online. Credential leaks from such incidents often cascade into account takeovers that affect your banking, email, shopping accounts, and even your children’s gaming profiles. For families, one exposed work or supplier record can link back to home addresses and family members, turning a corporate breach into a personal privacy problem.

The Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at publishing raw files. Once internal documents surface on dark-web leak sites, other criminals scrape the data and begin building identity chains. An email from an Adiantes supplier list can be cross-referenced with breached passwords, social-media handles, and public records. This process creates detailed profiles that enable doxxing, targeted phishing, or harassment. Children’s gaming accounts are especially vulnerable because kids often reuse passwords or email addresses tied to family data; a single leak can expose those accounts to takeover and further information theft.

Qilin’s Publicly Known Track Record

Public reporting attributes the qilin ransomware group with emerging in 2022. The gang has targeted organizations across multiple countries, focusing on mid-sized businesses in manufacturing, healthcare, and professional services. Their typical playbook involves initial access through phishing or exploited remote desktop protocols, followed by data exfiltration before deploying ransomware. After encryption, they pressure victims with a dual extortion tactic: threatening to publish stolen files on their leak site if ransom is not paid by a set deadline. Qilin has repeatedly listed companies that refused to pay, releasing samples of internal data to demonstrate seriousness.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what this claimed breach may have exposed about you.
• Rotate any password you used at Adiantes or with any of its suppliers, then enable two-factor authentication through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak that touches your data is caught and acted on within hours rather than months.
• Cover your entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same addresses and credentials.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The Adiantes breach is a reminder that corporate ransomware incidents now routinely spill into personal lives. Taking concrete steps today limits how far attackers can travel down the identity chain created by this and future leaks. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full family and household coverage including children’s gaming accounts. Start your DoxxScan trial and close the gaps before the next breach finds you.