ACBI Investigates Potential Cyber Incident After Qilin Ransomware Group Claims Attack The Australian College of Business Intelligence (ACBI) is actively investigating a potential cyber incident after the Qilin ransomware group listed the institution on 15 May. The college, based in Sydney’s Haymarket, was alerted to the claims by its IT services provider and has since engaged external cybersecurity specialists and authorities. An ACBI spokesperson confirmed awareness of the matter, stating that initial investigations found no evidence of compromised student data. However, the college is continuing to assess the incident’s scope and timing while working with the Australian Cyber Security Centre (ACSC) and regulatory bodies. Key stakeholders and relevant education authorities have been notified as part of the response process. The Qilin group, currently the world’s most active ransomware operation, has claimed 1,844 victims across 96 countries since 2022. Recent high-profile targets include Volkswagen Group France and Asahi, where the attack disrupted production and exposed customer data. In Australia, Qilin has recently listed Menzies Group, Bluize, and Generation Life among its victims. Operating as a ransomware-as-a-service (RaaS) model, Qilin leases its malware to affiliates in exchange for a share of ransom payments. Attack vectors typically include phishing, exploitation of network vulnerabilities, and weaknesses in backup systems. Some affiliates, however, have made claims without providing proof of data exfiltration mirroring the current situation with ACBI, where no details or samples have been shared. ACBI, which offers courses in AI, digital marketing, and IT to over 1,200 students, remains under investigation as authorities and cybersecurity experts determine the full impact of the incident.