Ransom! Grupo Tomza (FEB-2026)

The ransomware claim asserts that the threat actor qilin compromised Grupo Tomza in Mexico, encrypting systems as part of the attack. There are no available details on ransom demands, data leakage, or the extent of the incident. #Mexico

Incident Details

  • Victim: Grupo Tomza
  • Sector: Energy
  • Country: MX
  • Actor: qilin
  • Source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=9c11e7de-5468-31c0-85fc-063c5f869e36
  • Discovered: 2026-02-21 15:17:48.769935
  • Published: 2026-02-21 15:17:33.234004

Information

  • Ransomware incident attributed to Qilin.
  • Target: Grupo Tomza.
  • Location: Mexico (MX).
  • No additional details available.

Disclaimer: This post is based on public claims made by the ransomware group "qilin". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live