Ministry of Foreign Affairs of Ukraine

The Qilin Ransomware group attacked the Ministry of Foreign Affairs of Ukraine, stealing and purportedly selling off sensitive data including private correspondence, personal information, and official decrees. The severity of this cyber attack lies not only in the theft of confidential state-related information but also in its timing and targets, which align with ongoing geopolitical tensions, potentially escalating hybrid warfare between Russia and Ukraine. The disclosed breach could compromise diplomatic relations and national security, with broader implications for regional stability.

Source: https://securityaffairs.com/175025/cyber-crime/qilin-ransomware-ministry-of-foreign-affairs-of-ukraine.html

TPRM report: https://scoringcyber.rankiteo.com/company/arlietas

"id": "arl000030825",
"linkid": "arlietas",
"type": "Ransomware",
"date": "3/2025",
"severity": "100",
"impact": "8",
"explanation": "Attack that could bring to a war"

{'affected_entities': [{'industry': 'Public Sector',
                        'location': 'Ukraine',
                        'name': 'Ministry of Foreign Affairs of Ukraine',
                        'type': 'Government'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Private correspondence',
                                              'Personal information',
                                              'Official decrees']},
 'description': 'The Qilin Ransomware group attacked the Ministry of Foreign '
                'Affairs of Ukraine, stealing and purportedly selling off '
                'sensitive data including private correspondence, personal '
                'information, and official decrees. The severity of this cyber '
                'attack lies not only in the theft of confidential '
                'state-related information but also in its timing and targets, '
                'which align with ongoing geopolitical tensions, potentially '
                'escalating hybrid warfare between Russia and Ukraine. The '
                'disclosed breach could compromise diplomatic relations and '
                'national security, with broader implications for regional '
                'stability.',
 'impact': {'data_compromised': ['Private correspondence',
                                 'Personal information',
                                 'Official decrees']},
 'initial_access_broker': {'data_sold_on_dark_web': 'Yes',
                           'high_value_targets': ['Ministry of Foreign Affairs '
                                                  'of Ukraine']},
 'motivation': ['Financial', 'Geopolitical'],
 'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Qilin'},
 'threat_actor': 'Qilin Ransomware group',
 'title': 'Qilin Ransomware Attack on Ministry of Foreign Affairs of Ukraine',
 'type': 'Ransomware'}