The ransomware attack was carried out by threat actor qilin targeting Merko Ehitus in Estonia, resulting in significant data disruption. The incident underscores the persistent cybersecurity threats faced by Estonian organizations. #Estonia
Incident Details
- Victim: Merko Ehitus
- Country: EE
- Actor: qilin
- Source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=462ff951-291e-375d-88ab-7b267fedf784
- Discovered: 2025-12-15 18:42:30.173047
- Published: 2025-12-15 18:42:15.560507
Information
- Ransomware attack targeted Merko Ehitus.
- The incident occurred in Estonia (EE).
- The suspected actor behind the attack is Qilin.

Disclaimer: This post is based on public claims made by the ransomware group "qilin". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.