Ransomware Group: QILIN

VICTIM NAME: www[.]shautoparts[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the QILIN Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to an automotive manufacturing company based in China, known as SH Auto Parts. The leak was discovered on May 30, 2025, indicating a breach that compromised internal data and possibly operational systems. The company specializes in utilizing advanced computerized and robotic technologies to produce precision-engineered auto components, operating within a fully automated smart factory environment to ensure top-tier quality and safety standards.

The leak includes a screenshot of the victim’s website, highlighting potential exposure of sensitive business information. The attackers have provided a claim URL, which appears to be accessible via a dark web link, potentially offering access to stolen data. Although specific data files or download links are not detailed here, the leak suggests that proprietary manufacturing information or internal communications may have been compromised. The incident underscores the cybersecurity risks faced by manufacturing firms adopting Industry 4.0 technologies, emphasizing the importance of robust security measures to prevent data breaches.