DigiGround: Exclusive: Aussie app developer DigiGround investigating ransomware claims

Qilin Ransomware Group Targets Australian App Developer DigiGround

The Qilin ransomware group has claimed another Australian victim, adding bespoke app development firm DigiGround to its darknet leak site on 28 August. The hackers provided no details beyond the alleged breach, leaving the extent of the compromise unclear.

DigiGround, based in North Sydney, confirmed it is investigating the claim but has found no evidence of a breach as of yet. A company spokesperson stated that the investigation remains a priority, with further action to be taken if proof of an incident emerges.

Qilin, one of the most active ransomware operations globally, has listed 2,251 victims across over 100 countries since 2022, averaging 100 attacks per month in 2026. Operating under a ransomware-as-a-service (RaaS) model, the group allows affiliates to use its infrastructure in exchange for a share of ransom payments. Some affiliates disclose full attack details, while others, like the one behind the DigiGround claim, provide minimal information.

DigiGround specializes in mobile app development, graphic design, and digital marketing, with clients including Asia Pacific Defence Reporter, entrepreneur Amjad Khanche, and property firm First Step. This follows Qilin’s previous Australian victim, Asset Flooring Group Australia, targeted in early August.

Source: https://www.cyberdaily.au/security/14119-exclusive-aussie-app-developer-digiground-investigating-ransomware-claims

DigiGround cybersecurity rating report: https://www.rankiteo.com/company/digiground

"id": "DIG1788157681",
"linkid": "digiground",
"type": "Ransomware",
"date": "8/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Mobile App Development, Graphic Design, '
                                    'Digital Marketing',
                        'location': 'North Sydney, Australia',
                        'name': 'DigiGround',
                        'type': 'Company'}],
 'date_detected': '2024-08-28',
 'date_publicly_disclosed': '2024-08-28',
 'description': 'The Qilin ransomware group has claimed a breach of '
                'DigiGround, a bespoke app development firm based in North '
                'Sydney, Australia. The hackers listed the company on their '
                'darknet leak site on 28 August but provided no further '
                'details. DigiGround is investigating the claim but has found '
                'no evidence of a breach as of yet.',
 'investigation_status': 'Ongoing',
 'motivation': 'Financial gain (Ransomware-as-a-Service)',
 'ransomware': {'ransomware_strain': 'Qilin'},
 'references': [{'date_accessed': '2024-08-28',
                 'source': 'Darknet leak site (Qilin)'}],
 'response': {'communication_strategy': 'Public statement confirming '
                                        'investigation',
              'incident_response_plan_activated': 'Investigation ongoing'},
 'threat_actor': 'Qilin Ransomware Group',
 'title': 'Qilin Ransomware Group Targets Australian App Developer DigiGround',
 'type': 'Ransomware'}