Ransomware Group: QILIN

VICTIM NAME: Punta Del Agua

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the QILIN Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leaked data pertains to Punta del Agua, a family-owned dairy company with over 55 years of experience producing high-quality dairy products, including cheeses, butter, dulce de leche, and powdered milk. The ransomware attack was publicly disclosed on July 3, 2025, with the attack date recorded as July 2, 2025. The incident was associated with the cybercriminal group known as Qilin. The leak appears to include various sensitive details about the company’s operations, although specific PII or confidential internal information is not explicitly detailed. The associated link leads to a secure site where the compromised data is hosted, indicating a significant breach likely involving their business data and possibly customer or supplier information.

The ransomware leak page features a screenshot of the compromised environment, providing a visual overview of the leak contents. There is also an accessible URL to the leak site, which hosts the leaked files or information. The company’s official website, www.puntadelagua.com.ar, remains operational, and no specific industry activity code is listed. The attack has created concern regarding the security of the company’s data, but detailed contents of the leak, including the exact nature of the files or data exposed, have not been fully disclosed publicly. The incident underscores the importance of cybersecurity measures to prevent access to sensitive operational and confidential business information.