Diesel Electric listed by the Qilin ransomware group

Overview

The Qilin ransomware group has listed Diesel Electric, the South African automotive group operating www.de.co.za, on its leak site. The listing appeared on 6 December 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the group's systems. Automotive service networks hold customer records, vehicle service histories and corporate information, which are the likely contents of any exfiltration.

Risks for affected individuals

• Customer personal data may be exposed.
• Vehicle records could enable targeted fraud.
• Employees' information may be included.

What remains unknown

• The volume of records involved.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Customers should monitor their accounts and be cautious of unsolicited communications. The group should notify affected customers and staff, review compromised systems, and report the incident to South African authorities.