[QILIN] – Ransomware Victim: Village of New Lenox

AI Generated Summary of the Ransomware Leak Page

On November 7, 2025, the leak page publicly identified Village of New Lenox, a municipal government entity in the Public Sector, as a ransomware victim. The page frames the incident as a data-leak event rather than a purely encrypted system compromise, asserting that sensitive municipal information may have been exfiltrated from Village of New Lenox networks. The post date is November 7, 2025; no separate compromise date is provided in the data, so the post date is treated as the event date for this summary. The leak page includes a claim URL, indicating the attackers intend to publish the data or provide access to it. No ransom amount is disclosed in the provided data.

The leak post contains three images, described here as screenshots of internal documents or other internal visuals. The exact content of these images is not detailed in the available data. The body excerpt contains a token-like string labeled TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68, whose meaning isn’t explained. The overall framing suggests a data-leak scenario rather than a fully encrypted outage, with no explicit ransom demands described in the data. Personal information such as emails, phone numbers, or addresses is not included in the published content, and there are no other victims named beyond Village of New Lenox.