**Microf LLC Hit by Qilin Ransomware Attack, Exposing Sensitive Consumer Data**
Microf LLC, a financial services firm specializing in lease-to-own solutions for HVAC and water heater systems, disclosed a significant data breach on December 23, 2025, following a ransomware attack by the Qilin cybercriminal group. The incident, first publicized through filings with the Massachusetts and New Hampshire attorney general offices, exposed sensitive personal information, including names and Social Security numbers of affected consumers.
The breach originated on July 9, 2025, when Qilin claimed responsibility on its dark web portal, posting screenshots as proof of the compromise. The attack impacted 24 individuals in Massachusetts and seven in New Hampshire, though the full scope of affected consumers remains unclear.
In response, Microf began notifying impacted individuals via letter, offering 24 months of complimentary credit monitoring and identity theft protection through Cyberscout (a TransUnion company). Affected consumers have 90 days from notification to enroll. The company also provided guidance on placing fraud alerts or credit freezes and accessing free annual credit reports from major bureaus. A dedicated call center was established to assist those affected.
While no evidence of identity theft or fraud has been reported as of the disclosure, the breach’s severity is underscored by the exposure of Social Security numbers and the public dissemination of stolen data samples on the dark web. The incident highlights the ongoing threat posed by sophisticated ransomware groups targeting financial services firms.
Source: https://www.claimdepot.com/data-breach/micro-focus-2025
Microf cybersecurity rating report: https://www.rankiteo.com/company/microf
"id": "MIC1766850884",
"linkid": "microf",
"type": "Ransomware",
"date": "12/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '31 (24 in Massachusetts, 7 in '
'New Hampshire)',
'industry': 'Lease-to-Own Solutions (HVAC and Water '
'Heater Systems)',
'location': 'United States',
'name': 'Microf, LLC',
'type': 'Financial Services Firm'}],
'customer_advisories': 'Notification letters with steps to enroll in credit '
'monitoring and identity theft protection services, '
'instructions for fraud alerts/credit freezes, and '
'access to free annual credit reports.',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Names, Social '
'Security numbers',
'sensitivity_of_data': 'High (Social Security numbers)',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII)'},
'date_publicly_disclosed': '2025-12-23',
'description': 'Microf, LLC, a financial services firm specializing in '
'lease-to-own solutions for HVAC and water heater systems, '
'experienced a significant data breach due to a ransomware '
'attack by the Qilin group. The breach exposed sensitive '
'personal information, including names and Social Security '
'numbers, affecting consumers in multiple states.',
'impact': {'brand_reputation_impact': 'High',
'data_compromised': 'Names, Social Security numbers',
'identity_theft_risk': 'High'},
'motivation': 'Cybercrime, Financial Gain',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Qilin'},
'recommendations': 'Affected individuals should enroll in complimentary '
'credit monitoring and identity theft protection services, '
'place fraud alerts or credit freezes, and request free '
'annual credit reports.',
'references': [{'source': 'Massachusetts Attorney General Office'},
{'source': 'New Hampshire Attorney General Office'},
{'source': 'Qilin group dark web portal'}],
'regulatory_compliance': {'regulatory_notifications': 'Filed disclosures with '
'Massachusetts and New '
'Hampshire attorney '
'general offices'},
'response': {'communication_strategy': 'Notification letters to affected '
'individuals, dedicated call center',
'third_party_assistance': 'Cyberscout (TransUnion)'},
'threat_actor': 'Qilin group',
'title': 'Microf, LLC Data Breach and Ransomware Attack',
'type': 'Ransomware Attack, Data Breach'}