Estes Forwarding Worldwide Falls Victim to Qilin Ransomware

⚠ Disclaimer

This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources. The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes. Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of the personal data displayed or referenced here. Users must treat exposed data responsibly and ethically.

📌 Overview

The ransomware group Qilin has claimed responsibility for a cyberattack targeting Estes Forwarding Worldwide (EFW), a major U.S.-based logistics and freight forwarding provider. According to the dark web listing, the attackers exfiltrated sensitive internal documents and customer data from the organization’s infrastructure. Published evidence includes spreadsheets and images of passports, driver's licenses, and other forms of ID, suggesting a wide-reaching compromise.

EFW is a subsidiary of Estes Express and plays a significant role in supply chain operations across North America, managing over 7 million square feet of warehouse space and supporting 29 U.S. cities with a workforce of more than 1,000 professionals.

📊 Key Details