DisclosureLens
GLOBALUnknownRansomwareQilinLow

COMAPA Victoria

bd_616048e885235bf0 · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Oct 21, 2026

To disclose

—

Affected

Not disclosed

Confidence

60%
Full breach record for COMAPA Victoria →

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.

COMAPA en Ciudad Victoria, Tamaulipas, refuerza su seguridad digital tras ciberataque. COMAPA Victoria: COMAPA Victoria a été victime d'une tentative de cyberattaque par rançongiciel (ransomware). Les cybercriminels cherchaient à extorquer une rançon en bloquant les fichiers de l'organisme. Grâce à des sauvegardes à jour, l'institution a réussi à restaurer toutes les données sans effectuer de paiement. COMAPA a assuré que les données personnelles et bancaires des utilisateurs n'ont pas été compromises, car l'organisme ne stocke pas ces informations sensibles. Linked ransomware group: qilin.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Oct 21, 2026

Press report

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

—

Compliance clock

Not assessable

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

If an SEC 8-K, state-AG notice or victim statement lands, DisclosureLens merges it into an incident and links it here.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2022-10-08

qilin

According to ransomware.live, Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.

2,788 tracked hereFull profile →