CORNERSTONE STAFFING RANSOMWARE ATTACK LEAKS 120,000 RESUMES, CLAIMS QILIN GANG

Summary from the TLDR InfoSec newsletter

Qilin ransomware group breached Cornerstone Staffing Solutions, exfiltrating 300GB, including 120,000 resumes, SSNs, employee salary data, and internal financial records. The Russian-linked group has become 2025's most active ransomware operation with 991 victims since 2023, employing double extortion tactics and recently allying with LockBit and DragonForce. Security teams should expect increased targeting of staffing agencies and organizations storing large volumes of PII. Threat actors are leveraging the stolen resumes for sophisticated phishing campaigns.