[QILIN] – Ransomware Victim: Studio Corvo Parma

AI Generated Summary of the Ransomware Leak Page

On November 6, 2025, a ransomware leak post publicly identifies Studio Corvo Parma as a victim, attributed to the threat actor group “qilin.” The post presents the entity in a header line as “Studio Corvo Parma Business Services” and situates it in Italy, signaling a business-services profile. The body excerpt includes a token-like label labeled TOX with a hashed value, which appears to function as an internal tag or identifier rather than a public incident detail. A claim URL is indicated on the leak page, suggesting that the attackers provide a means to view or verify the stolen material. No ransom figure is shown in the excerpt, and there is no explicit compromise date provided; the shown date is the post date.

Visual evidence on the leak page consists of twenty image thumbnails, described as screenshots of internal documents or related visuals. The images appear to be hosted on onion-domain addresses, but the exact image URLs are not disclosed in this summary. There are no additional links presented beyond the claim URL. The summary retains the victim name Studio Corvo Parma and omits other company names mentioned in the leak text. The page indicates twenty images, but provides no further details on data volume or the specific content of the screenshots within the available excerpt.