Hangzhou Qihan Biotech Co., Ltd. Listed by Global Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On August 28, 2026, the ransomware group known as global listed Hangzhou Qihan Biotech Co., Ltd. on its leak site. That listing is an accusation from the group, not a finding confirmed by the company, a regulator, or an independent breach index. As of writing, Hangzhou Qihan Biotech Co., Ltd. has not publicly confirmed the claim.

Public detail is limited: the number of people who might be affected is unknown, and the listing does not disclose what data types, if any, were involved. For a biotech firm working on gene editing and advanced cell and organ therapies, even an unverified claim can raise practical questions for partners, patients, and staff about how to respond if sensitive material were ever shown to have left the organisation’s control.

What is being claimed

According to the listing, global has named Hangzhou Qihan Biotech Co., Ltd. on its leak site. The reported summary associated with the claim describes Qihan Biotech as a Hangzhou-based biotech company focused on gene editing and cell and organ therapies, including work on immune-privileged cells and xenogeneic organs intended to treat cancer and organ failure, with an aim of making such therapies more widely accessible.

The listing does not, in the available facts, state a method of intrusion, a ransom demand, a file count, a volume of data, or a timeline of alleged access. Scale and technical detail are undisclosed. Nothing in the public record provided here establishes that files were copied, published, or sold; the leak-site entry is the group’s claim and should be read as such until the company or another authoritative source confirms otherwise.

Inside global

Global is known publicly as a ransomware and extortion-style actor that pressures organisations by threatening to publish material it says it obtained, often via a dedicated leak site. Groups in this category typically combine encryption or access disruption with the threat of disclosure, and they use listings to amplify leverage and visibility. Their public posts are marketing and pressure tools as much as technical reports; they can exaggerate, recycle older material, or list victims without independent verification.

For this incident specifically, only what appears in the listing facts should be attributed to global: that it has listed Hangzhou Qihan Biotech Co., Ltd. and that the accompanying description frames the company as a gene-editing and cell/organ therapy developer. No further statements by global about this victim are included in the facts, and none should be invented.

About Hangzhou Qihan Biotech Co., Ltd.

Hangzhou Qihan Biotech Co., Ltd. is described in the available material as a Hangzhou-based biotechnology company specialising in gene editing and cell and organ therapies. Its stated focus includes immune-privileged cells and xenogeneic organs aimed at treating cancer and organ failure, with an ambition to broaden access to those approaches.

Organisations in this sector commonly handle scientific and clinical research records, intellectual property around engineered cells and protocols, partner and supplier contracts, employee information, and, depending on programmes, regulated health-related or donor-related data. A leak-site listing naming such a firm matters because trust, regulatory expectations, and the sensitivity of life-science work make even unproven claims consequential for reputation and for people who interact with the company—without proving that any particular system was compromised.

What data was at risk

The facts state that data types named as exposed were not disclosed. It is therefore not established what, if anything, was taken. Asserting a specific inventory would repeat the attacker’s framing as if it were an audit.

If files were taken, firms in gene editing and advanced cell and organ therapy typically hold categories such as research and development documents, manufacturing or process know-how, collaboration agreements, internal directories, and potentially clinical or donor-adjacent records under strict controls. Whether any of those categories were involved here is unconfirmed. People affected are listed as unknown.

Why it matters

An unverified leak-site claim still creates real-world uncertainty. Employees, collaborators, and individuals who have shared contact or professional details with a biotech developer may worry about phishing, social engineering, or misuse of business identity if attackers later wave alleged company material. The organisation faces pressure on communications, partner confidence, and compliance posture even when the underlying allegation remains unproven.

Conditional risk is the right frame: if internal documents were copied, competitors or bad actors could try to exploit technical or commercial content; if personal or contact data were involved, targeted scams could follow. None of that is established by the listing alone. What the listing does establish is that global chose to name this company publicly on a date reported as August 28, 2026. What it does not establish is confirmation of theft, the accuracy of any implied data set, or fault on the company’s part.

Steps worth taking either way

Because the incident is unconfirmed and data types are undisclosed, actions should stay precautionary rather than assume your information is already public.

• Treat unexpected emails, calls, or messages that reference Qihan Biotech, gene-editing work, or “stolen files” with caution; verify through official channels you already trust.
• If you use a work or personal password that might overlap with any account tied to the company or its partners, change it and enable multi-factor authentication where available.
• Watch financial and identity accounts for unusual activity if you ever shared sensitive personal data with the firm; freeze or alert institutions only if you see concrete signs of misuse.
• Prefer official company notices over screenshots or third-party leak-site posts when deciding what is confirmed.
• You can run a free exposure scan of your email to check whether your information has already appeared in known breach data sets unrelated to this claim.

Stay alert to future statements from Hangzhou Qihan Biotech Co., Ltd. or regulators. Until then, global’s listing remains an unverified claim, and responses should match that level of certainty.

AICompiled with AI assistance from public sources and published under our editorial standards.