Qilin ransomware has listed the Church of Scientology on its dark web leak site, claiming responsibility for a breach and publishing 22 screenshots as proof of access. The group has not disclosed how much data it allegedly stole or how the breach took place. Analysis of the leaked screenshots The screenshots shared by Qilin point to internal access within Advanced Organisation Saint Hill UK (AOSH UK), one of the Church’s major hubs. Multiple documents show visa processing records for religious staff, including named individuals applying for UK Religious Worker visas. Several approvals outline exact amounts allocated for immigration costs, including £2,600, £4,500 and £1,800 per person. One consolidated summary shows over £11,500 approved for multiple visa applications in a single funding cycle. These documents include dates, internal sign-offs, staff names, and departmental references, suggesting access to internal HR and finance workflows. Another large portion of the leaked material relates to operational spending, mailing campaigns, and event logistics. One set of files details a £30,000 budget request for weekly letters, mass mailers to 4,000 recipients, calendar shipping, and holiday card distribution to 12,000 people. Additional records authorise £6,351 for international mail fulfillment and postage. Event logistics documents list AV equipment purchases and rentals worth £6,000 for large-scale events, as well as £1,550 for TV screens, stands, and speakers for New Y