Qilin Ransomware Gang Claims Breach of Tennessee Valley Electric Cooperative The Qilin ransomware operation has allegedly breached the systems of Tennessee Valley Electric Cooperative (TVEC), which serves Wayne and Hardin Counties in West Tennessee, according to a report by Cybernews. While Qilin listed the attack on its dark web blog, it did not provide proof of stolen data, leaving the extent of the compromise unclear. TVEC, a subsidiary of the federally owned Tennessee Valley Authority (TVA), has not publicly confirmed the incident. However, based on past Qilin attacks, potential targets may include employee records, customer data, or internal documents. The ransomware group has a history of targeting U.S. electric cooperatives, including Karnes Electric Cooperative (23,000 households) and San Bernard Electric Cooperative (28,000 households) in 2025. Additionally, Qilin claimed to have exfiltrated 222 GB of data from Spark Power, a Canada-based electrical services provider with U.S. operations. The incident underscores ongoing cybersecurity risks to critical infrastructure, particularly within the energy sector. No further details on the breach’s impact or TVEC’s response have been disclosed.