Ransomware Group: QILIN

VICTIM NAME: WH Rogers Sheet Metal

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the QILIN Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak pertains to WH Rogers Sheet Metal, a manufacturing company based in the United States that specializes in custom metal fabrication services for over five decades. The breach was identified on July 15, 2025, and involves the leak of potentially sensitive company data. The victim operates within the manufacturing sector and serves clients in the Carolinas, utilizing advanced computerized and CAD technologies to fulfill custom design requirements. The leak page includes a publicly accessible screenshot illustrating internal information, suggesting data exfiltration and breach of confidential company details.

A claim URL provided on the leak page allows interested parties to access further information, potentially including stolen data or proof of the breach. The page is associated with the threat group known as “qilin,” indicating a known cybercriminal entity responsible for the attack. Although no specific infostealer details are listed, the leak likely contains proprietary business information, project details, or technical files. No personally identifiable information (PII) is disclosed publicly, ensuring victim confidentiality in the report. The attack emphasizes the ongoing risks faced by manufacturing firms from sophisticated ransomware threat actors.