Ransomware Group intelligence

Qilin

Active

Track Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.

Victims 2263 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-08-03 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 991 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2263 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Unknown kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 3 Onion service Unknown ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 4 Onion service Unknown b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Unknown ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2263)

    Search, filter and paginate the victim timeline for Qilin. Showing 1–100 of 2263.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Universitatea De Vest Vasile Goldi Din Arad id31198 View details Romania NGOs / Associations
    Ransomware Universitatea De Vest Vasile Goldi Din Arad id31198 View details Romania NGOs / Associations
    Ransomware Service Electric id31184 View details United States Finance / Legal / Insurance
    Ransomware Service Electric id31184 View details United States Finance / Legal / Insurance
    Ransomware Freedom Claims Management id31168 View details United States Finance / Legal / Insurance
    Ransomware Freedom Claims Management id31168 View details United States Finance / Legal / Insurance
    Ransomware INTERTRUST AUSTRALIA PTY LTD id31164 View details Australia Finance / Legal / Insurance
    Ransomware INTERTRUST AUSTRALIA PTY LTD id31164 View details Australia Finance / Legal / Insurance
    Ransomware Asset Flooring Group Australia id31165 View details Australia Construction / Real Estate
    Ransomware Asset Flooring Group Australia id31165 View details Australia Construction / Real Estate
    Ransomware Mairie de Drancy id31162 View details France Public Sector
    Ransomware Mairie de Drancy id31162 View details France Public Sector
    Ransomware Wire Products id31153 View details United States Manufacturing / Engineering
    Ransomware Wire Products id31153 View details United States Manufacturing / Engineering
    Ransomware The Saturday Evening Post id31140 View details United States Communication / Marketing
    Ransomware The Saturday Evening Post id31140 View details United States Communication / Marketing
    Ransomware Commercial Furniture Interiors id31141 View details United States Finance / Legal / Insurance
    Ransomware Commercial Furniture Interiors id31141 View details United States Finance / Legal / Insurance
    Ransomware Dienst Pack Systems id31142 View details Germany Manufacturing / Engineering
    Ransomware Dienst Pack Systems id31142 View details Germany Manufacturing / Engineering
    Ransomware Ceragres id31143 View details Canada Construction / Real Estate
    Ransomware Ceragres id31143 View details Canada Construction / Real Estate
    Ransomware Pointe Property Group id31144 View details United States Construction / Real Estate
    Ransomware Pointe Property Group id31144 View details United States Construction / Real Estate
    Ransomware Schreiner Trockenbau GmbH id31145 View details Austria Construction / Real Estate
    Ransomware Schreiner Trockenbau GmbH id31145 View details Austria Construction / Real Estate
    Ransomware Community Management Associates id31116 View details United States Finance / Legal / Insurance
    Ransomware Community Management Associates id31116 View details United States Finance / Legal / Insurance
    Ransomware The Dcoop id31078 View details Spain Agriculture / Food
    Ransomware The Dcoop id31078 View details Spain Agriculture / Food
    Ransomware Hawaii Family Dental id31074 View details United States Healthcare / Medicine
    Ransomware Hawaii Family Dental id31074 View details United States Healthcare / Medicine
    Ransomware Audio Precision, Inc id31066 View details United States Communication / Marketing
    Ransomware Audio Precision, Inc id31066 View details United States Communication / Marketing
    Ransomware TenSparrows id31057 View details United States IT
    Ransomware TenSparrows id31057 View details United States IT
    Ransomware Db Tarimsal Enerji id31054 View details Türkiye Agriculture / Food
    Ransomware Db Tarimsal Enerji id31054 View details Türkiye Agriculture / Food
    Ransomware Byonyks id31056 View details United States IT
    Ransomware Byonyks id31056 View details United States IT
    Ransomware Prenisac id31049 View details Other
    Ransomware Prenisac id31049 View details United States Other
    Ransomware Excel Consultores id31050 View details Mexico Finance / Legal / Insurance
    Ransomware Excel Consultores id31050 View details Mexico Finance / Legal / Insurance
    Ransomware Affinity Capital id31051 View details United States Finance / Legal / Insurance
    Ransomware Affinity Capital id31051 View details United States Finance / Legal / Insurance
    Ransomware Adpo id31042 View details Belgium Transportation / Travel / Logistics
    Ransomware Adpo id31042 View details Belgium Transportation / Travel / Logistics
    Ransomware servitelco id31043 View details Chile Telecommunications
    Ransomware servitelco id31043 View details Chile Telecommunications
    Ransomware Orimar id31044 View details Belgium Manufacturing / Engineering
    Ransomware Orimar id31044 View details Belgium Manufacturing / Engineering
    Ransomware Indian Motos Inmot id31045 View details Ecuador Construction / Real Estate
    Ransomware Indian Motos Inmot id31045 View details Ecuador Construction / Real Estate
    Ransomware Hoc id31020 View details United Kingdom Manufacturing / Engineering
    Ransomware Hoc id31020 View details United Kingdom Manufacturing / Engineering
    Ransomware Gran valle negocios id31006 View details Argentina Retail / E-commerce
    Ransomware Gran valle negocios id31006 View details Argentina Retail / E-commerce
    Ransomware Groupe Fenwick id30987 View details France Retail / E-commerce
    Ransomware Groupe Fenwick id30987 View details France Retail / E-commerce
    Ransomware Savills France id30970 View details France Construction / Real Estate
    Ransomware Savills France id30970 View details France Construction / Real Estate
    Ransomware Wilbert's id30971 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Wilbert's id30971 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Contacto Garantido id30881 View details Mexico Retail / E-commerce
    Ransomware Contacto Garantido id30881 View details Mexico Retail / E-commerce
    Ransomware Universitatea de Vest „Vasile Goldiș” din Arad id30882 View details Romania NGOs / Associations
    Ransomware Universitatea de Vest „Vasile Goldiș” din Arad id30882 View details Romania NGOs / Associations
    Ransomware Jubilee Jobs id30843 View details Nigeria NGOs / Associations
    Ransomware Jubilee Jobs id30843 View details Nigeria NGOs / Associations
    Ransomware Plitvička Jezera Nacionalni Park id30844 View details Croatia Transportation / Travel / Logistics
    Ransomware Plitvička Jezera Nacionalni Park id30844 View details Croatia Transportation / Travel / Logistics
    Ransomware The Myers Y Cooper id30845 View details United States Manufacturing / Engineering
    Ransomware The Myers Y Cooper id30845 View details United States Manufacturing / Engineering
    Ransomware Guntert & Zimmerman id30841 View details Switzerland Manufacturing / Engineering
    Ransomware Guntert & Zimmerman id30841 View details Switzerland Manufacturing / Engineering
    Ransomware Principle Diagnostics Laboratory id30842 View details India Healthcare / Pharma
    Ransomware Principle Diagnostics Laboratory id30842 View details India Healthcare / Pharma
    Ransomware GURR Abdichtungstechnik GmbH id30839 View details Germany Manufacturing / Engineering
    Ransomware GURR Abdichtungstechnik GmbH id30839 View details Germany Manufacturing / Engineering
    Ransomware GOP id30833 View details United Kingdom Transportation / Travel / Logistics
    Ransomware GOP id30833 View details United Kingdom Transportation / Travel / Logistics
    Ransomware Stryker id30825 View details United States Manufacturing / Engineering
    Ransomware Stryker id30825 View details United States Manufacturing / Engineering
    Ransomware Ejército Argentino id30820 View details Argentina Public Sector
    Ransomware Ejército Argentino id30820 View details Argentina Public Sector
    Ransomware Kean University id30821 View details United States Education
    Ransomware Kean University id30821 View details United States Education
    Ransomware Highline Community College id30822 View details United States Education
    Ransomware Highline Community College id30822 View details United States Education
    Ransomware Machinerie P&W id30777 View details Canada Manufacturing / Engineering
    Ransomware Machinerie P&W id30777 View details Canada Manufacturing / Engineering
    Ransomware ABM Enviro id30778 View details Canada Services
    Ransomware ABM Enviro id30778 View details Canada Services
    Ransomware WellPerf id30771 View details United Kingdom Healthcare / Pharma
    Ransomware WellPerf id30771 View details United Kingdom Healthcare / Pharma
    Ransomware Corporate 360 Business Solutions id30766 View details Canada IT
    Ransomware Corporate 360 Business Solutions id30766 View details Canada IT
    Ransomware Assos Pharmaceuticals id30767 View details Türkiye Healthcare / Pharma
    Ransomware Assos Pharmaceuticals id30767 View details Türkiye Healthcare / Pharma