Tong Yang Group Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target manufacturers across Asia and beyond, using double-extortion tactics that combine encryption with the threat of public data leaks. Against that backdrop, the listing of Tong Yang Group by the qilin ransomware group on 15 October 2025 adds another industrial firm to a lengthening roster of claimed victims. Public detail remains limited, yet the appearance of a long-established Taiwanese supplier on a ransomware leak site raises clear questions for employees, partners and anyone whose information may have been held in the company’s systems.

What is known so far is that qilin claims to have exfiltrated internal files from Tong Yang Group. The number of people affected has not been disclosed, and independent confirmation of the intrusion itself has not been published. Even so, the claim alone is enough to warrant careful attention from those connected to the firm.

What happened

On 15 October 2025, Tong Yang Group appeared on the leak site operated by the qilin ransomware group. The listing asserts that internal files were taken during a ransomware attack. No further technical details—such as the initial access vector, the precise date of intrusion, the volume of data removed, or whether systems were also encrypted—have been released publicly. The number of individuals whose information may be involved is recorded as unknown. At present the incident rests on the group’s claim; no official confirmation or denial from Tong Yang Group has been included in the available record.

Who is qilin?

Qilin is a ransomware operation that has been active for several years and is widely documented as a ransomware-as-a-service (RaaS) group. Affiliates typically gain access to corporate networks, exfiltrate data, and then deploy ransomware, after which the operators threaten to publish the stolen material unless a ransom is paid. The group maintains a dark-web leak site where it lists victims and, in many cases, posts samples or full archives of claimed data. Qilin has previously targeted organisations in manufacturing, logistics, healthcare and professional services across multiple regions. Its public statements about any given victim should be treated as claims until independently verified; the listing of Tong Yang Group follows that same pattern.

Who is Tong Yang Group?

Tong Yang Group is a Taiwanese manufacturer founded in 1952 and headquartered in Tainan. It produces automotive plastics, sheet metal and cooling products, together with motorcycle plastics, moulds and paints. Companies of this type sit inside complex global supply chains: they hold design drawings, production schedules, supplier contracts, quality records and employee information, and they routinely exchange data with vehicle makers and tier-one suppliers. A breach at such a firm can therefore affect not only its own workforce but also commercial partners who rely on the confidentiality of shared technical and commercial material. Because the company has operated for more than seven decades, its systems may contain long-term historical records as well as current operational data.

The information in question

The only data category named in the public record is “internal files exfiltrated in ransomware attack.” No inventory of specific file types, databases or personal-data fields has been released. Organisations in the automotive-components sector typically store employee personnel files, payroll details, customer and supplier contracts, engineering drawings, quality-control records and internal correspondence. Whether any of those categories were among the files claimed by qilin remains unconfirmed. Until a fuller disclosure appears, the exact contents of the material must be regarded as unknown.

The real-world impact

For individuals, the principal risks are identity theft, phishing and social-engineering attacks that exploit any personal or contact information that may have been taken. Employees and contractors could face targeted messages that appear to come from the company or its partners. For Tong Yang Group itself, the consequences include potential disruption of production systems, contractual obligations to notify customers and regulators, and the longer-term erosion of trust among automotive clients who share sensitive design data. Because the scale of the alleged exfiltration is undisclosed, the precise breadth of these risks cannot yet be measured; the absence of confirmed numbers does not eliminate the need for vigilance.

Were you affected?

If you are a current or former employee, contractor or business partner of Tong Yang Group, treat any unexpected communication that references the company with caution. Change passwords on accounts that may have been used in a work context, enable multi-factor authentication where available, and monitor financial and credit activity for unusual behaviour. You can also run a free exposure scan of your email address to check whether it has already appeared in known breach data sets. Keep records of any suspicious contact and report it to the appropriate company security team or local authorities if fraud is suspected. Further official statements from Tong Yang Group or Taiwanese regulators, if they emerge, will provide clearer guidance on next steps.

AICompiled with AI assistance from public sources and published under our editorial standards.