[ Ransomware claim · whitearmor · 25 Oct 2026 ]
Hisense
The ransomware group whitearmor named Hisense (China) on its leak site on 25 Oct 2026. This is the group's own claim: it has not been verified by Cyfenced or Ransomware.live, and some claims turn out to be exaggerated, recycled or false.
[ Status ]Has the attack been confirmed?
We have found no statement from Hisense and no press report of an attack so far. Until the organisation says something, treat the listing as an unproven claim, but stay alert to the phishing such claims are used for.
[ The organisation ]Who is Hisense?
- What it does
- Hisense Group is a Chinese multinational maker of consumer electronics and home appliances, with televisions as its main product. It also makes air conditioners, refrigerators, washing machines, phones, projectors and monitors, and owns brands such as Gorenje, Toshiba TVs (Toshiba Visual Solutions), Asko and Kelon.
- Based in
- Qingdao, Shandong, China
- Founded
- 1969, as the Qingdao No. 2 Radio Factory
- Size
- a group of 54 companies and offices, holding about 13% of global television shipments in the first quarter of 2026
- Who it serves
- Households and businesses worldwide that buy its televisions and appliances, through retailers and its regional subsidiaries. It also makes products for other brands as an original equipment manufacturer.
Partners and customers it names publicly
- FIFA, Official sponsor of the FIFA World Cup
- UEFA, Sponsor of UEFA national team competitions
- Gorenje, Subsidiary
- Toshiba Visual Solutions, Subsidiary (television business)
[ Impact ]Who could be affected
If the claim is genuine, customers who registered products or contacted support could have personal details exposed and could be targeted by phishing that mentions their devices or warranties. Retailers, distributors and suppliers could see delays to orders, shipments or after-sales service if business systems were disrupted. The claim does not say which part of the group is involved.
In technology generally: Software and IT providers can become a way into their customers: an attack on one supplier can reach many businesses that use its products or services.
[ The attacker ]About whitearmor
whitearmor has claimed 20 organisations in the last 30 days, most in United States, United Kingdom and Philippines, and mostly in technology, other and transportation. We wrote about the group in Fifty victims in a day, two hosting breaches and town halls offline.
Other organisations whitearmor has named
- United Kingdom
- United States
- Philippines
[ What to do ]If you are a customer, partner or neighbour
- Be cautious with emails, texts or calls about Hisense product registrations, warranties or repairs, and contact Hisense through its official website instead of links in messages.
- Keep the firmware on Hisense smart TVs and appliances up to date through the device's own settings.
- If you used the same password for a Hisense account elsewhere, change it and turn on two-factor authentication where available.
- Suppliers and retailers should confirm any change to payment or bank details with a known Hisense contact before acting on it.
[ Similar claims ]Other technology organisations in China
- auditteam
- aoqin
- fulcrumsec