Qilin Lists Grupo Crónica on Leak Site

Qilin added Grupo Crónica to its leak site on Oct. 19, 2026, but the available evidence only shows an unverified claim by the operator. The sources reviewed do not confirm a breach, exfiltration, or any impact in Argentina. RansomNews also noted that these posts can be inflated, duplicated, or even fabricated.

What is known about Grupo Crónica's listing?

Cybersecurity Tracker recorded an unverified claim that Qilin added Grupo Crónica, an organization linked to Argentina, to its leak site on Oct. 19, 2026. HookPhish also identified grupocronica.com.ar as an organization in Argentina tied to a Qilin entry titled Grupo Crónica, while presenting that reference as a ransomware report without independent confirmation of the incident.

RansomNews, meanwhile, listed Grupo Crónica among the organizations Qilin posted that day and stressed that leak site entries are operator claims, not verified incidents. The publication added that a listing can be inflated, duplicated, or fabricated, so presence on that page alone is not enough to confirm an attack.

What else did RansomNews' tracking show?

RansomNews reported that Qilin had posted eight organizations in the previous 24 hours and that Grupo Crónica was categorized as Business Services in the entry reviewed. That file did not list a country, although Cybersecurity Tracker and HookPhish both linked it to Argentina on an attributed, unconfirmed basis.

In its broader tracking, RansomNews counted 1,085 Qilin-attributed listings in 2026 through that date. The same source reiterated that all of those entries are claims posted on leak sites, not incidents that are verified on their own.