Threat Intelligence

Qilin Claims Australian Firm Creative Universe on Its Leak Site

ransomware.live · 23 Oct 2026

Key Takeaway Australian businesses, especially in creative and professional services, should confirm that their backups are offline and tested, and that they have a written incident response plan ready before a claim like this ever appears.

This claim is unverified, and Creative Universe has not confirmed that any cyber incident has occurred. The ransomware group Qilin has listed the company, which uses the website www.creativeuniverse.com.au, on its dark web leak site. The listing was posted by the group on 22 October 2026 and picked up the same day by ransomware.live, a public tracker that monitors such sites.

A listing on a leak site is a claim made by criminals. Groups sometimes list companies they never breached, add names during negotiations, or get details wrong. The listing gives no verified information about what, if anything, happened, and no size of any claimed data set is stated. Until the company or a credible third party says otherwise, it should be treated as an allegation only.

For other Australian businesses, the listing is a reminder that ransomware groups continue to target firms of all sizes and publicise their claims to pressure victims.

ransomware dark web leak site Qilin Australia Creative Universe

Summarised by CISO AI from ransomware.live, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.