[ Ransomware claim · qilin · 23 Oct 2026 ]
Miljaus Producciones S.L (www.miljaus.com)
The ransomware group qilin named Miljaus Producciones S.L (www.miljaus.com) (Spain) on its leak site on 23 Oct 2026. This is the group's own claim: it has not been verified by Cyfenced or Ransomware.live, and some claims turn out to be exaggerated, recycled or false.
[ Status ]Has the attack been confirmed?
No public statement from Miljaus or press report of a cyber incident in 2026 was found at the time of writing.
[ The organisation ]Who is Miljaus Producciones S.L (www.miljaus.com)?
- What it does
- Miljaus Producciones, trading as Miljaus Media, is an agency that produces audiovisual and multimedia content for the internet. Its services include video marketing, social media planning and management, and event coverage.
- Based in
- Zaragoza, Aragon, Spain
- Who it serves
- Miljaus works for businesses, public bodies and organisers that need video, social media and event content. Projects shown on its website include work for Certest and Embou and a candidacy for an EU innovation award.
Partners and customers it names publicly
- Certest, client project shown on the Miljaus website
- Embou, client project shown on the Miljaus website
[ Impact ]Who could be affected
An attack on a small content production agency could delay video and social media work for its clients and put unpublished footage or campaign material at risk. Clients who gave the agency access to their social media accounts could be exposed if those logins were held on affected systems. Contact details of clients and people filmed could be at risk if the claim is accurate.
In other generally: Customers, employees and partners can be affected: services can be interrupted, and personal or business data the organisation holds can be threatened with publication.
[ The attacker ]About qilin
Qilin, formerly known as Agenda, is a ransomware-as-a-service operation that recruits affiliates and practises double extortion, stealing data and threatening to publish it as well as encrypting systems. US health authorities report that its affiliates commonly gain access through spear phishing and the abuse of remote monitoring and management tools.
qilin has claimed 126 organisations in the last 30 days, most in United States, Germany and Mexico, and mostly in professional services, manufacturing and other. We wrote about the group in Fifty victims in a day, two hosting breaches and town halls offline.
Other organisations qilin has named
- United States
- Chile
- Malaysia
- Germany
[ What to do ]If you are a customer, partner or neighbour
- If Miljaus manages or has access to your social media or advertising accounts, change those passwords and review who has access.
- Turn on two-factor authentication for any shared accounts and check for unexpected posts or settings changes.
- Treat unexpected emails with file-sharing links or invoices that appear to come from the agency with caution and confirm them by phone.
- Ask the agency whether any unpublished material or personal data relating to your projects could be involved.
[ Similar claims ]Other other organisations in Spain
- thegentlemen