We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Aoqin

Active

Track Aoqin with 4 published victims and 1 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 4 Known published victims in this dataset
First discovered 2026-11-04 Earliest victim discovery date
Last discovered 2026-11-04 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country Slovenia 1 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Aoqin is tracked by Breach House as a ransomware group with 4 published victims.

Slovenia is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 1 25.0%
  • Pending 3 75.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 2h ago aoqinwwrizxbrwm3qb6l4jzgujgmcetp4jaug7fqylbf3xcwqwzvbuid.onion

    Top Activity Sectors (4)

    Victims (4)

    Search, filter and paginate the victim timeline for Aoqin. Showing 1–4 of 4.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware SILIKO d.o.o. id36156 View details Slovenia Manufacturing / Engineering pending
    Ransomware Petroshahd(Enap Sipetrol International - Egypt Branch) id36157 View details Chile Energy leaked
    Ransomware Nextron Technology id36158 View details China IT pending
    Ransomware Goldsmith & Hull id36159 View details United States Services pending