G-WAY Microwave Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On January 12, 2026, G-WAY Microwave was listed on the leak site maintained by the qilin ransomware group. The listing states that the group claims to have exfiltrated internal files from the organization during a ransomware attack. No further details have been released about the number of people affected, the volume of data involved, or the circumstances of the intrusion. This development occurs amid persistent ransomware activity in which threat actors combine encryption with the threat of data publication to pressure victims. Public reporting of such listings provides limited visibility into the incident while leaving many operational facts unconfirmed.

What happened

G-WAY Microwave was added to the qilin ransomware leak site, with the group claiming it had stolen internal files. The date the listing appeared is reported as January 12, 2026. Information about when the underlying intrusion occurred, how access was obtained, or whether encryption was deployed remains undisclosed. The number of individuals potentially affected is also unknown.

The group behind it: qilin

Qilin is a ransomware operation that has conducted multiple campaigns since at least 2022. Public reporting describes it as employing a double-extortion model, in which data is first copied from targeted networks and later threatened with disclosure if ransom demands are not met. The group has appeared in connection with incidents across several industries and maintains a leak site where it lists organizations from which it claims to have obtained material. Attribution in any single case rests on the group’s own statements unless independently verified.

Who is G-WAY Microwave?

G-WAY Microwave operates in the microwave technology sector, an area that includes the development and supply of components used in communications and related systems. Organizations of this type routinely maintain technical specifications, engineering records, supplier and customer correspondence, and internal operational documents. A listing on a ransomware leak site draws attention to the organization because such data can contain information that extends beyond the company itself to partners or end users.

What data was at risk

The only detail provided is that internal files were claimed to have been exfiltrated. No inventory of specific file types, categories, or record counts has been released. Organizations in the microwave technology sector commonly store proprietary design information, contract documentation, and employee or partner records, yet the exact contents of any exfiltrated material in this case remain unconfirmed.

What's at stake

Exposure of internal files can create operational and commercial consequences for the affected organization, including the potential release of technical or business information. Where personal data is present, individuals may face risks such as targeted phishing or misuse of credentials. Because the precise nature and scope of the data have not been disclosed, the full range of downstream effects cannot be assessed from public information alone.

What to do if you're exposed

Individuals who have had contact with G-WAY Microwave or similar organizations should monitor their email and financial accounts for unusual activity and consider enabling multi-factor authentication on important services. Organizations can review their own incident-response procedures and any notifications they receive directly. Readers may also run a free exposure scan of their email address against known breach data sets to determine whether their information appears in previously reported incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.