AMH Philippines Reportedly Hit by Qilin Ransomware

AMH Philippines, a construction and engineering consultancy firm operating in the country, has reportedly fallen victim to a ransomware attack allegedly carried out by the cybercriminal group known as Qilin. The breach was discovered on December 7, 2025, at approximately 1:53 PM, marking what appears to be a compromise of the company’s internal data. According to information displayed on the leak site associated with the ransomware group, the attackers claim to have obtained more than 1,099,117 files totaling approximately 6.7 terabytes of data, potentially containing sensitive company and client information. The listing was published under the "Construction" category, pointing toward targeted intrusions involving industries tied to infrastructure and development. As of the time of writing, no public statement has been released by AMH Philippines regarding the scope of the incident, whether operations have been disrupted, or if communication with the attackers is ongoing. Qilin, known for high-pressure extortion tactics, typically releases stolen data if ransom demands are not met. Further details are expected as more information becomes available.

Other contents

New Home For Deep Web Konek

New Home For Deep Web Konek

Qilin ransomware group claims data breach against Cagayan Appliance Center; second alleged Philippine target this week

Qilin ransomware group claims data breach against Cagayan Appliance Center; second alleged Philippine target this week

AMH Philippines Reportedly Hit by Qilin Ransomware

AMH Philippines Reportedly Hit by Qilin Ransomware

Threat Actor Claims Release of PLLO Contact Records Containing Details of Legislators and Government Staff

Threat Actor Claims Release of PLLO Contact Records Containing Details of Legislators and Government Staff

Araneta Group Confirms Cyberattack; $5 Million Ransom Demand Reported

Araneta Group Confirms Cyberattack; $5 Million Ransom Demand Reported

Suspected Bot Network Floods Reactions on a Philippine Government Facebook Page

Suspected Bot Network Floods Reactions on a Philippine Government Facebook Page

COA reports persistent connectivity delays and accounting variances in DICT’s 2024 operations

COA reports persistent connectivity delays and accounting variances in DICT’s 2024 operations

A Dark Web Investigation finds platform rewarding users for sharing animal-harm content

A Dark Web Investigation finds platform rewarding users for sharing animal-harm content

Following The Money: Inside the Hidden Economy of Online Child Exploitation on Telegram

Following The Money: Inside the Hidden Economy of Online Child Exploitation on Telegram

DPWH PELITA System Breached; Nearly 72,000 Employee Images and 1.9 Million Lines Exposed in Major Data Leak

DPWH PELITA System Breached; Nearly 72,000 Employee Images and 1.9 Million Lines Exposed in Major Data Leak