PCB Uitvaartzorg Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to pressure organisations by combining encryption with the threat of public data leaks, a pattern that has become a routine feature of the current cyber-threat landscape. In this environment, even smaller specialist firms can appear on leak sites, leaving clients and partners uncertain about what, if anything, may have been exposed.

On 6 November 2025, the Dutch funeral-care firm PCB Uitvaartzorg was listed on the leak site operated by the ransomware group known as qilin. The group claims to have stolen internal data during a ransomware attack. Public detail remains limited: the number of people affected is unknown, and the precise contents of the material have not been independently confirmed.

What happened

According to the available record, PCB Uitvaartzorg appeared on qilin’s ransomware leak site on or around 6 November 2025. The listing asserts that the group carried out a ransomware attack and exfiltrated internal files. No further technical details—such as the initial access method, the duration of the intrusion, or the volume of data taken—have been disclosed in the public summary. The number of individuals potentially affected is listed as unknown. At present the claim rests solely on the group’s own publication; independent verification of the breach’s full scope has not been reported.

Who is qilin?

Qilin is a ransomware operation that functions largely as a ransomware-as-a-service model. Affiliates obtain access to victim networks, deploy the encryptor, and typically threaten to publish stolen data if a ransom is not paid—a classic double-extortion approach. The group has been observed targeting organisations across multiple sectors and geographies, often advertising victims on a dedicated leak site to increase pressure. Public reporting over recent years has associated qilin with the theft and staged release of internal documents, though the specific claims made about any single victim must be treated as assertions by the group itself until corroborated. In the present case, the only statement on record is that qilin claims to have stolen internal data from PCB Uitvaartzorg.

About PCB Uitvaartzorg

PCB Uitvaartzorg is a Dutch organisation operating in the funeral-care sector. Firms of this type arrange funerals, cremations and related services, and therefore routinely handle sensitive personal information belonging to the deceased and their families. That information commonly includes names, addresses, dates of birth and death, next-of-kin details, financial arrangements for services, and sometimes medical or religious preferences. Because the data concerns people at a moment of vulnerability, any unauthorised access carries particular weight. A listing on a ransomware leak site therefore raises immediate questions about the confidentiality of records that families expect to remain private.

The information in question

The public facts state only that “internal files” were exfiltrated in a ransomware attack. No inventory of file types, no sample documents, and no confirmation of specific data categories have been released. Organisations in the funeral sector typically hold personal identifiers, contact details of relatives, payment records, and service documentation. Whether any of those categories were among the material claimed by qilin remains unconfirmed. Readers should therefore treat the precise contents as undisclosed until further official information becomes available.

Why it matters

For individuals whose details may have been held by PCB Uitvaartzorg, the principal risks are misuse of personal information and unwanted contact. Even limited internal files can contain enough identifiers to enable phishing, identity fraud or social-engineering attempts that exploit knowledge of a recent bereavement. For the organisation itself, the incident creates operational, legal and reputational pressure: it must investigate the claim, notify regulators and affected parties if required under data-protection rules, and restore trust with clients who rely on discretion. Because the scale of the alleged exfiltration is unknown, both the firm and any potentially affected families face a period of uncertainty while the facts are clarified.

Were you affected?

If you have used the services of PCB Uitvaartzorg or believe your details may have been held by the firm, treat any unexpected communications with caution. Monitor bank and credit statements for unusual activity, and be wary of emails or calls that reference a funeral or claim to need further personal information. Change passwords on related accounts if you reused credentials, and enable multi-factor authentication where available. You can also run a free exposure scan of your email address to check whether it has already appeared in known breach data sets; such a scan provides an early indication but cannot confirm or rule out involvement in this specific incident. Official updates from the organisation or relevant authorities remain the most reliable source of further information.

AICompiled with AI assistance from public sources and published under our editorial standards.