The Qilin ransomware group has claimed French firm AXE-EXPERTS as a new victim, in a listing posted on its leak site on 7 November 2026. The claim was reported by the ThreatMon threat-intelligence team that day and recorded by the Ransomware.live tracker at 17:25 UTC.

The listing is an unverified claim, not a confirmed breach. Neither report gives details of how the attackers got in, whether company systems were encrypted, what data may have been taken, or whether a ransom was demanded. The company, which operates under the domain axe-experts.com, has not publicly commented on the claim.

What the reports disagree on

The two sources differ on the company's sector: ThreatMon lists AXE-EXPERTS under finance, while HookPhish places it under professional services, so that detail should be treated with care. Both agree the exposure report is empty so far, with no passwords, cookies or critical exposures recorded, and no stolen-data samples have been published.

A busy day for Qilin

The AXE-EXPERTS listing was reported alongside a Rhysida claim against Brazil's Minas Gerais state court and on the same day as further Qilin claims against companies in Brazil, Mexico and Portugal. Defenders should watch for indicators linked to Qilin, keep backups tested, and treat the AXE-EXPERTS listing as an allegation until the company or investigators confirm what happened.

[Source: undercodenews.com](https://undercodenews.com/rhysida-and-qilin-ransomware-groups-claim-two-new-victims-in-brazil-and-france-video/) | [Source: hookphish.com](https://www.hookphish.com/blog/ransomware-group-qilin-hits-axe-experts/)