Qilin Ransomware Attack Exposes Sensitive Data of Georgia Housing Authority Residents The Augusta Housing Authority (AHA), a Georgia-based agency serving over 15,000 low-income families including military veterans has been targeted in a ransomware attack by the Russia-linked Qilin gang. The breach, disclosed on February 9, 2026, was posted on Qilin’s dark web leak site alongside seven other victims, with sample documents revealing exposed personal data. Leaked files include a tax preparation agreement with an accounting firm, an employee payroll spreadsheet detailing medical benefit deductions, a 2023 expense report, and a December 2025 Utility Reimbursement Report the most sensitive document listing recipients’ full names, addresses, and exact payment amounts. While Qilin has not disclosed the total number of compromised files or ransom demands, the group operates under a ransomware-as-a-service (RaaS) model, allowing affiliates to deploy its malware in exchange for a cut of ransom payments. Qilin, first identified in 2022, has aggressively expanded its operations, targeting manufacturers, financial institutions, healthcare providers, and government agencies. In 2025 alone, the gang listed over 1,000 victims, with high-profile attacks on gaming conglomerates, pharmaceutical firms, and energy companies. The AHA attack follows a pattern of Qilin’s 2026 campaign, which has already claimed 150 victims as of early February. The AHA’s website remains operational but displays a banner acknowledging technical issues, though it is unclear whether this is directly linked to the ransomware incident. The agency has not responded to inquiries from Cybernews at the time of reporting. Qilin’s leak site indicates that four additional victim entries were marked as already "publicated," suggesting prior data exposure. The breach underscores the growing threat of RaaS groups to municipal and public-sector organizations, where sensitive resident data including financial and personal records remains a prime target.