Ransomware Group: QILIN

VICTIM NAME: Metro Supply Chain Group[.]

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the QILIN Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with Metro Supply Chain Group reveals compromised sensitive data, primarily financial records and personal information of employees. It explicitly mentions the availability of balance sheets, billings, budgets, and other financial data which are critical for the company’s operations. Furthermore, it suggests that this information is set to be published on a blog within five days, indicating that the threat actor is leveraging a timeline to pressure the victim into compliance. This extensive data theft covers vital aspects of the organization’s financial health and employee privacy, raising significant concerns about the potential misuse of such information.

Metro Supply Chain Group operates within the Transportation and Logistics industry in Canada. The published date of the leak is noted as February 24, 2025. Additionally, the presence of a screenshot on the leak page serves as visual evidence of the breach, while a post title underlines the victim’s name, ensuring they are publicly identified in this context. The leak page may also contain download links for the exposed data, although specific URLs or details are not detailed here. This situation highlights the increasing threat faced by logistics companies in safeguarding their data against ransomware attacks.