What happened

The Qilin ransomware/extortion group listed Quaker State Mexico among victims added to its dark-web leak site on 21 August. Independent ransomware indexes captured the listing, but the company had not acknowledged a breach and no public technical evidence, stolen-data sample, ransom demand or operational disruption was available when this record was added. Quaker State Mexico produces and distributes automotive and industrial lubricants and is associated with Shell-branded lubricant operations in Mexico; this corporate marker does not identify a compromised plant or assert an attack on operational technology. Because the only evidence is the extortion group's own claim as relayed by monitoring services, the event is recorded as an unconfirmed data-theft claim rather than a documented ransomware incident.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.