Qilin Ransomware Group Lists Australian Financial Firm Generation Life on Darknet Leak Site The Qilin ransomware-as-a-service (RaaS) operation has added Australian financial services company Generation Life to its darknet leak site, marking the latest development in a cyber incident first disclosed in late April. The group listed the firm on 15 May, though the affiliate behind the attack has yet to release any stolen data or details about the breach. Generation Life, which provides investment bonds, retirement planning, and financial advice, confirmed the incident in a 17 May update, stating that an unauthorized third party accessed part of its systems via an external service provider. The breach was initially announced by its parent company, Generation Development Group, on 27 April 2026 through the Australian Stock Exchange (ASX). The company reported that the attack has been contained, with no evidence of unauthorized access to systems handling investment activities or financial transactions. However, forensic experts are still investigating the scope of the potential data exposure. Generation Life has not disclosed whether any customer or corporate data was compromised but stated it would notify affected parties if necessary. Qilin, a highly active ransomware group, operates on a profit-sharing model with affiliates and has targeted 1,842 victims globally, including 29 in Australia and 3 in New Zealand. The group emerged in August 2022 and has since become one of the most prolific ransomware operations. Its most recent Australian victim was Bluize, a hospitality IT solutions provider, attacked on 13 May. Generation Life, headquartered in Sydney with offices in Melbourne, is part of the Generation Development Group and serves clients across investment and financial planning services. The company continues to work with cybersecurity specialists to assess the full impact of the breach.