Powered by MOMENTUMMEDIA
For breaking news and daily updates, subscribe to our newsletter

Exclusive: Qilin claims cyber attack on Pennant Hills Golf Club

Threat actors have claimed a cyber attack on a north-western Sydney golf club, having listed it on the dark web.

Fri, 03 Jul 2026
Exclusive: Qilin claims cyber attack on Pennant Hills Golf Club

Pennant Hills Golf Club, founded in 1923, is the Hills District’s leading private golf club, with a 5,925-metre par-71 eighteen-hole championship course. The club is known for hosting amateur events and competitions.

The golf club was listed on the dark web by the infamous Qilin ransomware gang overnight; however, very few details are known about the alleged cyber attack.

Qilin’s listing does not outline details of the incident, what kind of data was allegedly stolen, if any, or what kind of ransom or deadline has been set.

 
 

Cyber Daily has reached out to Pennant Hills Golf Club for more information.

Who is Qilin?

Qilin has claimed 1,968 victims since it was first observed in 2022, spread across 99 countries. It is currently the most active ransomware operation in existence, averaging about 100 victim listings per month so far in 2026.

The group operates under a ransomware-as-a-service model, with affiliates gaining access to its ransomware infrastructure in return for a cut of any ransom payments.

While some affiliates will publish complete details of their activities, including the volume of data stolen and screenshots of evidence, others post minimal information, often not going into detail about the data or its contents.

Qilin’s most recent Aussie victim was K-12 tutoring provider Kinetic Education, which was listed on the dark web on 8 June.

Like with Pennant Hills Golf Club, the leak post does not include the volume of data involved, nor any details of the data potentially compromised. All that’s included is Kinetic Education’s company logo, the date of the leak post, and the number of views it has clocked up.

Cyber DailyWant to see more stories from trusted news sources?
Make Cyber Daily a preferred news source on Google.
Tags:

Daniel Croft

Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.