A Chattanooga wholesale distributor showed up on a ransomware leak site this morning. Ransomware.live indexed Chattanooga Shooting Supplies (chattanoogashooting.com) as a claimed victim of the Qilin ransomware group at 2026-10-15 12:08 UTC (about 8:08 a.m. ET Thursday). Aggregators record the website and a retail/e-commerce sector tag; the listing description is blank (N/A).
The company's own site describes a family-owned firearms and outdoor wholesale business founded in 1977, serving independent dealers from 2600 Walker Road in Chattanooga, Tennessee — with a large warehouse footprint, tens of thousands of SKUs, and dealer-facing ordering tools. The public site was up (HTTP 200) when we checked Thursday morning.
What's claimed, and what's confirmed
Claimed: Qilin has listed Chattanooga Shooting Supplies on its leak site and associated the claim with chattanoogashooting.com. Trackers show no disclosed data size, no ransom amount, and no published file inventory. Those absences still leave the listing as an actor assertion that the firm is a victim — not proof of what, if anything, was taken.
Not confirmed: As of Thursday morning we found no statement from Chattanooga Shooting Supplies, no mainstream news report, and no state or federal filing. There is no confirmed encryption, no confirmed theft of dealer, employee, or order data, no reported warehouse or ecommerce outage, and no word on any payment. Leak sites are extortion tools. Treat this as a claim until the company says otherwise. (Separately, Qilin previously claimed the Hamilton County Sheriff's Office in 2025 — a different organization; do not conflate the two.)
Why it matters to wholesale distributors and specialty retailers
B2B wholesalers sit between brands and independent dealers. They hold dealer account files, credit applications, FFLs and compliance paperwork where applicable, inventory and pricing, shipping labels, and remittance instructions — often in one Microsoft 365 tenant plus a dealer portal or ERP. A leak-site claim is a supply-chain question for every shop that shared banking or account details with the distributor.
The same pattern shows up in Chattanooga, Rome, Atlanta, and across the Southeast: multi-decade family distributors with warehouse PCs near the dock, shared sales-rep laptops, and dealers who will email "updated wiring instructions" the moment a headline hits. The fastest damage after a listing is often invoice fraud and portal lockouts, not encryption.
Wholesale shops also inherit brand portals, drop-ship tools, and after-hours order phones. If those credentials live in a shared password spreadsheet or a single mailbox, one compromised inbox can stall dealer orders the same week hunters and shops need product. Continuity is not only "can we open email" — it is "can we still pick, ship, and invoice without wiring money to a stranger."
Clear takeaway
Treat the Qilin claim against Chattanooga Shooting Supplies as a continuity drill for wholesale distributors and specialty retailers. Protect MFA on email and dealer portals, keep restorable backups of dealer and inventory records, and verify every bank or remittance change by phone — no matter what a leak site alleges.
Actions to take this week
- Require MFA on Microsoft 365 / Google Workspace, VPN, ERP, and dealer or brand portals. Retire shared warehouse and sales-rep logins.
- Check leaked-credential exposure for your domain and force resets on anything that shows up, starting with owners, AP, sales managers, and IT admins.
- Confirm backups you can restore of dealer accounts, inventory, order history, and email — with one copy that cannot be changed or deleted. Test a restore this month.
- Segment warehouse and dock PCs from finance systems where you can, and limit who can export dealer or remittance lists.
- Brief AP and key dealer accounts: new bank or remittance details get a call-back to a known number, never a reply to the email.
- Write a one-page incident card: who leads, who calls your insurer and IT provider, and how you reach warehouse leads if email is down.
Brotherly Technology helps distributors, retailers, and industrial SMBs across Rome, Northwest Georgia, Chattanooga, and the Southeast turn ransomware headlines into a short readiness review — MFA, backups, vendor access, and payment-change controls. If you want a second set of eyes before the next claim lands, give us a call.
Sources:
- Ransomware.live: Chattanooga Shooting Supplies / Qilin. Discovered 2026-10-15 12:08 UTC; website chattanoogashooting.com; claim-level only (description N/A; no data size disclosed).
- RansomLook recent listings. Mirrors the Chattanooga Shooting Supplies / Qilin row; still claim-level.
- Chattanooga Shooting Supplies (chattanoogashooting.com). Company context: Chattanooga TN firearms/outdoor wholesale to dealers since 1977; Walker Road address on corporate-info page. No incident acknowledgment cited here.