Point Four EPoS Solutions Listed by qilin Ransomware Group

On April 24, 2026, Point Four EPoS Solutions appeared on the leak site operated by the qilin ransomware group. The company, which provides electronic point-of-sale systems, is claimed to have had internal files exfiltrated after a ransomware attack. Anyone whose payment processing, customer records, or supplier data passed through Point Four’s systems may now have personal information at risk.

What's Publicly Reported from Reporting

Public reporting indicates that qilin listed Point Four EPoS Solutions on its data-leak portal and claimed to have stolen internal company files. The exact volume of data and the number of individuals affected remain unknown. Available reporting describes the incident as a classic ransomware double-extortion case in which the attackers first encrypt systems and then threaten to publish stolen data unless a ransom is paid. No evidence has surfaced that the stolen files have been released to the public yet, but the group’s standard practice is to maintain pressure through incremental leaks or full publication after a deadline passes.

Why This Matters for You and Your Family

If you or your family have shopped at businesses that use Point Four’s EPoS terminals, your payment details, contact information, or order history could be among the records now held by criminals. Internal files from such providers often contain spreadsheets of customer names, email addresses, phone numbers, delivery addresses, and sometimes partial payment card data. Once this information leaves the company’s control, it can be sold on underground forums and used for identity theft, phishing, or account takeover attempts. Ordinary families rarely realise their local retailer’s payment provider has been breached until fraudulent charges or unexpected loan applications appear months later.

The Doxxing and Identity-Chain Implications

A single breach like this rarely stays isolated. Criminals combine the newly exposed customer records with data from previous leaks to build detailed profiles. An email address taken from a Point Four file can be matched to a username on a gaming platform, a family member’s social-media account, or an old shopping-site registration. These connections create an identity chain that makes doxxing and targeted harassment far easier. Credential leaks of this nature frequently cascade into gaming-account takeovers, especially for children who reuse passwords or email addresses across entertainment services and retail purchases.

Qilin’s Publicly Known Track Record

Public reporting attributes the qilin ransomware group’s emergence to mid-2022. The group has since targeted organisations across healthcare, education, manufacturing, and retail sectors. Notable prior victims include several mid-sized service providers whose customer data appeared on the same leak site. Qilin’s typical playbook involves gaining initial access through phishing or exploited remote-desktop services, exfiltrating documents before deploying encryption, and then posting samples on their leak portal with countdown timers. The group’s extortion style combines threats of data publication with offers to negotiate ransoms in cryptocurrency.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what the Point Four breach connects to.
• Rotate any password you have ever used with a Point Four customer portal or linked retailer and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught within hours instead of months.
• Cover the household with DoxxScan family protection that extends to your children’s gaming accounts, which often chain back to the same addresses and emails used for retail purchases.
• Let remediation specialists handle takedown requests for any exposed personal records that surface on data-broker or underground sites.

The Point Four breach is a reminder that payment processors and point-of-sale vendors hold information that directly affects ordinary families. Acting quickly on credential hygiene and identity mapping limits how far criminals can travel along the chain of data. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this incident has opened.