cyfenced.com →

[ Ransomware claim · qilin · 24 Oct 2026 ]

SLTN Inter Access

The ransomware group qilin named SLTN Inter Access (Netherlands) on its leak site on 24 Oct 2026. This is the group's own claim: it has not been verified by Cyfenced or Ransomware.live, and some claims turn out to be exaggerated, recycled or false.

Not confirmed so far

[ Status ]Has the attack been confirmed?

We have found no statement from SLTN Inter Access and no press report of an attack so far. Until the organisation says something, treat the listing as an unproven claim, but stay alert to the phishing such claims are used for.

[ The organisation ]Who is SLTN Inter Access?

What it does
SLTN, formerly known as SLTN Inter Access, is a Dutch IT services provider and systems integrator. It offers digital workplace, datacentre and cloud, networking, cybersecurity, data, AI, application and telecom services, and describes itself as a fully Dutch company focused on private and sovereign cloud, security and managed services. SLTN took over Inter Access in 2013.
Based in
Hilversum, North Holland, Netherlands
Size
more than 700 employees, with revenue of 385 million euros in its most recent financial year (June 2026)
Who it serves
Organisations in finance, healthcare, industry, government, logistics and business services across the Netherlands. Published public sector work includes hardware and services for the Utrecht Regionale ICT-Dienst and outsourced ICT services for the municipality of Dronten.

Partners and customers it names publicly

  • Microsoft, technology partner (Gold and Silver Partner status, per SLTN)
  • IBM, technology partner (Premier Partner, per SLTN)
  • Dell, technology partner (Titanium Partner, per SLTN)
  • Gemeente Dronten, customer that outsourced its ICT services to SLTN
  • Regionale ICT-Dienst Utrecht, customer awarded part of a hardware and services tender in 2019

[ Impact ]Who could be affected

As a managed IT and infrastructure provider, a disruption at SLTN could affect the many client organisations that rely on it for workplaces, networks, hosting and support, including public bodies and healthcare providers. Clients could see delayed support or projects, and could face a higher risk of phishing or follow-on attacks if any shared access or client information was exposed.

In this kind of organisation generally: Customers, employees and partners can be affected: services can be interrupted, and personal or business data the organisation holds can be threatened with publication.

[ The attacker ]About qilin

Qilin, also known as Agenda, is a ransomware-as-a-service operation whose affiliates often gain access through vulnerable VPN and firewall devices or stolen credentials, steal data and then encrypt systems. It uses double extortion, threatening to publish data on its leak site, and has been among the most active groups in 2025 and 2026.

qilin has claimed 126 organisations in the last 30 days, most in United States, Germany and Mexico, and mostly in professional services, manufacturing and other. We wrote about the group in Fifty victims in a day, two hosting breaches and town halls offline.

qilin on Ransomware.live

Other organisations qilin has named

[ What to do ]If you are a customer, partner or neighbour

  1. Clients should ask their SLTN account contact for an update and whether any services, accounts or remote access used by SLTN need review.
  2. Review and, where appropriate, rotate credentials, API keys and remote access granted to the provider, and check logs for unusual activity.
  3. Treat unexpected emails or calls claiming to be from SLTN support with care, especially requests to install software, approve logins or change payment details.
  4. Check whether contractual or regulatory reporting duties, such as under the GDPR or NIS2, apply to your organisation.
Researched with AI from the sources on this page on 26 Oct 2026. Facts can change: check the organisation's own announcements.