Brisbane Accounting Firm Hit by Qilin Ransomware, Client Data Leaked A Brisbane-based accounting firm, Kennedy McLaughlin & Associates, has confirmed a cyber incident after being listed on the darknet leak site of the Qilin ransomware operation. The breach, detected earlier this month, involved unauthorized access to part of the firm’s IT environment, with stolen data including financial details of several clients recently published online. The company, which provides taxation, estate planning, and business advisory services, detected the intrusion in March but only saw the full dataset released in June. A spokesperson stated that immediate containment measures were taken, systems were restored, and cybersecurity experts were engaged to bolster defenses. The Australian Cyber Security Centre (ACSC) and the Office of the Australian Information Commissioner (OAIC) have been notified, and affected individuals have been informed with guidance on protecting their information. Qilin, a prolific ransomware-as-a-service (RaaS) group, has claimed 1,882 victims across 98 countries since 2022, making it one of the most active ransomware operations. Unlike some groups that publish data quickly, Qilin and its affiliates may delay leaks for months. In 2024 alone, the group has listed 17 Australian victims, including Melbourne-based Branded Products in May. Kennedy McLaughlin, a registered tax agent with 21 staff, serves clients across industries such as property development, medical professions, and legal services. The firm has emphasized its commitment to security following the incident.