Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2263 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2263)
Search, filter and paginate the victim timeline for Qilin. Showing 901–1000 of 2263.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Cary Pediatric Center id25568 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Fluorsid Spa id25564 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Central Roofing South Wales id25563 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Laboratorios Smasac id25562 View details | Mexico | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Ilumno id25561 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | UGS id25560 View details | Singapore | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Colacem id25559 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | CFM Mozambique id25549 View details | Mozambique | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Moen id25541 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Aero-Coating id25540 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Bergmanis Preyra id25539 View details | Canada | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | PSTECHLTD id25538 View details | United Kingdom | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Krez & Flores id25537 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Texas State Utilities id25536 View details | United States | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | Neo Group id25535 View details | Singapore | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Lunsford Capital id25507 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Pre-Con Builders id25506 View details | Canada | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Radiant Remodeling id25505 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Gtech id25504 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Ernest Maier id25503 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Designers Mirror and Glass id25502 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Pathology Associates Of Saint Thomas id25501 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Resource Corporation of America id25461 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Young Wealth Management id25460 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Best Insurance Agency id25458 View details | Finance / Legal / Insurance | |||
|
No additional victim description available. |
|||||
| Ransomware | Hayden Safe & Lock id25457 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | G-WAY Microwave id25456 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Superior Water Conditioning id25455 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Pensam Residential id25420 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sarl Alliance id25419 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | San Silvestre School id25418 View details | Peru | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Bouygues Energies & Services id25404 View details | France | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | TriVector Services id25383 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Gaviota id25382 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | STESAD id25381 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Softlab SpA id25380 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Spring Grove Area School District id25379 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Retrofit Service id25378 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Anteriad id25372 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | PTS Goldkist Industries Sdn Bhd id25368 View details | Malaysia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | The Cressi id25367 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Telstar-Hommel id25366 View details | Korea, Republic of | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Evergreen Printing id25362 View details | United States | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Sortimage id25361 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Commercial Paving id25360 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Berkmann Wine Cellars id25347 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | USArt id25341 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Secorp Industries id25339 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Medical Asset Management id25338 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Health Bridge Chiropractic id25337 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Sönmezler Metal id25283 View details | Türkiye | Manufacturing / Engineering | ||
|
No additional victim description available. |
|||||
| Ransomware | Cal Spas, Inc. id25282 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Tommotek id25281 View details | Finland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Ellison Educational Equipment id25262 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Farmacia San Pablo id25261 View details | Mexico | Agriculture / Food | ||
|
No additional victim description available. |
|||||
| Ransomware | Jing Cheng Enterprise Co., Ltd. id25260 View details | Taiwan, Province of China | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Sai Oral SurgeryOral id25259 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | mdm®NT id25258 View details | Poland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | McKenzie SewOn id25257 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Röben Tonbaustoffe id25256 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | NECO Equipment id25255 View details | Taiwan, Province of China | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | сj Global id25254 View details | United States | Retail / E-commerce | ||
|
No additional victim description available. |
|||||
| Ransomware | Csv Group id25245 View details | Italy | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Sugawara Laboratories id25244 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | KOPA Kozmetik A id25242 View details | Türkiye | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Luminex Software id25241 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | BNZ Materials id25234 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Z-Tronix id25232 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Quasar id25231 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | TaLachaim id25230 View details | Israel | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Auforum AG id25224 View details | Switzerland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | SEACSUB S.p.a. id25199 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Grupo Hafesa id25194 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sintac Recycling id25193 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Willowdale Steeplechase id25191 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Questica id25184 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Seac id25183 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Goodwin College id25182 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Atalian id25175 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Typhoo Tea id25162 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Dom Development id25161 View details | Poland | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Hometech Window id25156 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Georgia Dermatology & Skin Cancer Center id25155 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Ortho Mattress id25154 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Hopital La Rabta id25153 View details | Tunisia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Bangchak Corporation id25093 View details | Thailand | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Madera County Superintendent of Schools id25089 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Lynn Electrical id25086 View details | New Zealand | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | SEIMITSU THAI COMPANY LIMITED id25085 View details | Thailand | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | ARO id25066 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Happy Telecom id25065 View details | United Kingdom | Telecommunications | ||
|
No additional victim description available. |
|||||
| Ransomware | Felix Gonzalez Law Firm id25064 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | LogicVein id25063 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | SV-Büro Ing. Schulz GmbH id25062 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sipl id25061 View details | India | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Niradia Enterprises id25046 View details | India | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | daispa.it id25045 View details | Italy | Telecommunications | ||
|
No additional victim description available. |
|||||
| Ransomware | SW/WC Service Cooperative id25044 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | CoreHQ id25043 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Shore Gardens Rehabilitation & Nursing Center id25042 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||