Today’s reminder not to just repeat threat actors’ claims without checking or attempting to verify them first.

A DataBreaches.net author reports that ransomware group Qilin erroneously listed Richardson Sales Performance as a victim on its leak site; review of the group’s proof suggests the actual target was Richardson Projects (Richardson Holdings) in Sri Lanka. The post underscores the need for journalists and automated feeds to verify threat-actor claims to prevent spreading false headlines and reputational harm.