Edlong Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target mid-sized industrial and manufacturing firms as part of a broader pattern of double-extortion attacks that pair encryption with data theft. In this landscape, listings on criminal leak sites often serve as the first public signal that an organisation has been hit, even when independent confirmation remains limited.

On 9 May 2024, the ransomware group known as qilin publicly listed Edlong, a long-established flavour and ingredients company. Public detail is limited: the number of people affected is unknown, and the only described exposure is internal files said to have been exfiltrated. The listing itself is a claim by the group rather than a verified disclosure by the company.

Breaking down the breach

According to the available record, Edlong was listed by the qilin ransomware group on 9 May 2024. The report states that internal files were exfiltrated in a ransomware attack. No further technical details—such as the initial access vector, the duration of the intrusion, the volume of data taken, or any ransom demand—have been disclosed in the public summary. The number of individuals potentially affected is recorded as unknown. Because the information originates from a threat-actor listing, it remains an unverified claim until corroborated by the organisation or independent investigators.

The group behind it: qilin

Qilin operates as a ransomware-as-a-service (RaaS) group that has been active in recent years. Like many contemporary ransomware crews, it typically employs a double-extortion model: encrypting systems while also stealing data and threatening to publish it if payment is not made. Affiliates of the group are known to target a range of sectors, including manufacturing and industrial supply chains, and to post victim names on dedicated leak sites to increase pressure. Public reporting on qilin has documented its use of common initial-access methods such as phishing and exploitation of unpatched remote-access services, though none of those methods has been confirmed in connection with this particular listing. The group’s claim that it holds Edlong data should therefore be treated as an assertion pending independent verification.

Who is Edlong?

Edlong was founded in 1914 and specialises in custom flavour development, applications and culinary support, regulatory compliance, and supply-chain performance. The company produces and supplies dairy flavours and ingredients to clients in the food industry. Organisations of this type routinely handle proprietary formulations, customer specifications, supplier contracts, quality-control records, and employee or contractor information. A breach involving such a firm can therefore affect not only the company itself but also the food manufacturers and brands that rely on its products and technical support. Because the food-ingredient sector sits inside tightly regulated supply chains, any compromise of internal files can raise questions about product integrity, contractual confidentiality, and regulatory reporting obligations.

The information in question

The public record names only “internal files exfiltrated in ransomware attack.” No inventory of specific data categories—such as customer lists, recipes, financial records, or personal employee data—has been released. Companies engaged in flavour development and ingredient supply typically maintain trade-secret formulations, batch records, client project files, and compliance documentation. Whether any of those materials were among the files claimed by qilin is unconfirmed. The absence of a detailed data inventory means that the precise scope of exposure remains unknown.

Why it matters

For individuals whose contact or employment details may have been stored in internal systems, the risk includes potential phishing, social-engineering attempts, or identity-related misuse if personal information was present. For Edlong’s commercial partners, the concern centres on the possible leakage of proprietary formulations, pricing, or supply-chain arrangements that could be exploited by competitors or used to disrupt operations. The organisation itself faces operational disruption from any encryption, reputational questions arising from the public listing, and the need to assess whether regulatory notifications are required. Because the scale of the incident is undisclosed, the full extent of these risks cannot yet be quantified.

If your data was in this claimed breach

If you have a past or present relationship with Edlong—as an employee, contractor, or business contact—consider the following practical steps:

• Monitor financial and email accounts for unusual activity and enable multi-factor authentication where available.
• Treat unsolicited messages that reference the company or its products with caution, as they may be phishing attempts.
• Request a free credit or identity-monitoring service if you believe sensitive personal data could have been involved.
• Run a free exposure scan of your email address against known breach data sets to check whether your information has already appeared elsewhere.

Public detail on this incident remains limited; further clarity will depend on any statements the company or independent researchers may later provide.

AICompiled with AI assistance from public sources and published under our editorial standards.