INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Die Linke data stolen by Qilin ransomware attack
| 2026-04-03 16:36 CRITICAL LOW RANSOMWARE & EXTORTION DATA BREACH
Executive Summary
AI-generated
On March 27, the Qilin ransomware group compromised the network of Die Linke, a German democratic socialist political party, and is threatening to leak stolen data. The attackers are described as Russian-speaking cybercriminals motivated by both financial and political interests. With over 123,000 registered members, primarily in eastern Germany, Die Linke's membership database was not impacted. The Qilin ransomware group has since confirmed the attack on its website, listing Die Linke among its victims without publishing any data samples. This is a standard tactic to coerce victims into paying a ransom; however, no further details have been provided by the attackers or the party regarding the extent of the breach.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
APT29APT29
QilinQilin
Target & Sectors
DACH
DACH
governmentgovernment
Incident Timeline
2026/04/03
Threat actors using Qilin ransomware targeted Die Linke, a German democratic socialist political party.
Click on any entity below to view its context and source!
data_breach
123,000 registered members
It has 123,000 registered members and participates in several state governments, especially in eastern Germany.
data_breach
64 members
Founded in 2007, the Die Linke (Left Party) is currently represented in the German parliament (Bundestag) through 64 members.
threat_actor
APT29
In 2024, Mandiant uncovered a
campaign from APT29
targeting CDU, a major political party in the country, with a backdoor named WineLoader.
Tactical Metrics
Metrics
data_breach
123,000
Registered Members
Click for context!
It has 123,000 registered members and participates in several state governments, especially in eastern Germany.
Metrics
data_breach
64
Members
Founded in 2007, the Die Linke (Left Party) is currently represented in the German parliament (Bundestag) through 64 members.
Intelligence Sources
BleepingComputer
2026-04-03
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Incident Version History
CURRENT VERSION
Last Updated: 2026-10-07T06:28
Comprehensive Tactical Telemetry
Highly Correlated Entities
4x
timeline
Temporal Reference
March 27
date
4x
organisation
Identified Entity
Bundestag
entity
3x
tactic
Cyber Operation Type
Ransomware
tactic
2x
source region
Origin Country
Germany
country
2x
target region
Target Country
Russian Federation
country
Contextual Telemetry
Context Block
4 METRICS
data breach
Registered Members
123,000
registered members
malware
Malware Payload
Qilin
tool
data breach
Members
64
members
threat actor
APT Group
APT29
actor
Click on any entity below to view its context in the main text!
Selective Unpublish
Selecciona las redes de las que quieres eliminar esta publicación. El sistema intentará borrar el post real de la API y limpiará la base de datos para que puedas volver a lanzarlo.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies.
Read our Privacy Policy.