Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2263 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2263)
Search, filter and paginate the victim timeline for Qilin. Showing 1201–1300 of 2263.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Spark Innovation id23979 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Regional Business Systems id23970 View details | Barbados | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Kensington Court id23967 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | QuaLex Manufacturing id23966 View details | Manufacturing / Engineering | |||
|
No additional victim description available. |
|||||
| Ransomware | Kdr Real Estate Services id23956 View details | United States | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | Maresa Logística id23926 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | SES Société Energies Services id23924 View details | France | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | FREEDL GROUP s.r.l. id23923 View details | Italy | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Spark Power id23911 View details | Canada | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | Sol Trading id23905 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Trigg Laboratories id23900 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Viabizzuno id23854 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Fundidora de Cananea, S.A id23850 View details | Mexico | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Muskoka Brewery id23839 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Cornerstone Staffing Solutions id23836 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Brian-Kyles Construction id23797 View details | United States | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | Yaesu id23772 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | OMS id23765 View details | Slovakia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Mciver Engineering & Controls id23764 View details | United States | Manufacturing / Engineering | ||
|
No additional victim description available. |
|||||
| Ransomware | Gullco International id23745 View details | Canada | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Hitzinger id23744 View details | Austria | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Gadge USA id23743 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | JC Auto Accident Law Firm id23742 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Wasserverband Wulkatal id23739 View details | Austria | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Advanced Delivery Services id23737 View details | United Kingdom | Transportation / Travel / Logistics | ||
|
No additional victim description available. |
|||||
| Ransomware | SHRM New Mexico id23736 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Scouts Canada id23735 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Shollenberger Januzzi & Wolfe id23730 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Marine Turbine Technologies id23729 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Village of New Lenox id23723 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Klae Construction id23722 View details | United States | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | Rex-Hide id23669 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Studio Corvo Parma id23665 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Systems Integrated id23657 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Sai Mai Hospital id23656 View details | Thailand | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | PCB Uitvaartzorg id23655 View details | Belgium | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | UScraft id23654 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Tass Meister Patent Firm id23653 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Ville de MontLaurier id23648 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Noble Compaña de Seguros id23644 View details | Mexico | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Francehopital id23622 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Maine Course Hospitality Group id23612 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Habib Bank AG Zurich id23606 View details | Switzerland | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Habib Bank id23605 View details | Pakistan | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Durvet id23603 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Mango's Tropical Cafe id23596 View details | United States | NGOs / Associations | ||
|
No additional victim description available. |
|||||
| Ransomware | Prova id23595 View details | France | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | ANCO id23565 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Deco Dental id23554 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Red Phoenix Construction id23546 View details | Canada | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | Gun Accessory Supply id23532 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | FA Servers id23522 View details | Slovenia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Center for Neuropsychology Learning and Development id23521 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Disseny Dental id23520 View details | Spain | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Anderson-Moore Construction id23518 View details | United States | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | Suarez & Menendez id23510 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Bengal Industries id23509 View details | Transportation / Travel / Logistics | |||
|
No additional victim description available. |
|||||
| Ransomware | bagnoles.nl id23508 View details | Netherlands | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | halifax.k12.va.us id23507 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Price & Ramey Insurance id23487 View details | United States | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | reesegroupinc.com id23481 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | southernspecialtysupply.com id23480 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | tanyacreations.com id23479 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Super Value id23478 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Truro Cannabis id23476 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | renrns.com id23475 View details | Hong Kong | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | upea.com id23474 View details | Finland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | chirhochiropractic.com id23473 View details | United States | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | alissco.com id23472 View details | United Arab Emirates | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | echolakefoods.com id23471 View details | United States | Agriculture / Food | ||
|
No additional victim description available. |
|||||
| Ransomware | Altimedia id23470 View details | Korea, Republic of | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Enessance Holdings Co., Ltd id23469 View details | Japan | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Malibu Boats Australia id23468 View details | Australia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Lorber, Greenfield & Polito, LLP id23450 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Microbix Biosystems id23434 View details | Canada | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Productive Tool Products id23426 View details | United States | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | MedImpact Healthcare id23409 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Double Oak Construction id23403 View details | United States | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | Mainetti UK - Data breach id23400 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Micke Stridh Maskin id23399 View details | Sweden | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Henrietta Ezeoke Law Firm id23398 View details | Nigeria | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Izaki Group Investments id23397 View details | Israel | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Domy id23395 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Malgor id23365 View details | Puerto Rico | Communication / Marketing | ||
|
Founded in 1926 in San Juan, Puerto Rico, Malgor & Co., Inc. is a leader in supplying proprietary lines of food and miscellaneous items, as well as recognized brands through special distribution agreements. They serve a diverse clientele that ... |
|||||
| Ransomware | InfraCom Group id23351 View details | Sweden | Communication / Marketing | ||
|
InfraCom Group AB (publ) is a leading player in IT infrastructure, offering services like mobile and fixed telephony, cloud PBX, fiber internet, server hosting, and web platforms since 1999. The company serves approximately 20,000 clients, pr ... |
|||||
| Ransomware | South Alabama Regional Planning Commission id23349 View details | United States | Communication / Marketing | ||
|
SARPC is a locally controlled and organized instrument of local government in Southwestern Alabama, serving Mobile, Baldwin, and Escambia counties, along with twenty-nine municipalities. The organization provides programs and services focused ... |
|||||
| Ransomware | Essential Cabinetry Group id23345 View details | United States | Communication / Marketing | ||
|
Simpsonville, SC-based Essential Cabinetry is a manufacturer of custom, semi-custom and stock-plus kitchen and bathroom cabinetry that is sold primarily through the dealer channel. Through its three market-leading brands (Tedd Wood Fine Cabin ... |
|||||
| Ransomware | City of Sugar Land id23342 View details | United States | Public Sector | ||
|
Founded as a sugar plantation in the early mid-20th century and incorporated in 1959, Sugar Land is a city in the state of Texas, in the United States. The city is within the Houston, The Woodlands and Sugar Land metropolitan area and Fort Be ... |
|||||
| Ransomware | Zacho-Lind id23341 View details | Denmark | Construction / Real Estate | ||
|
Zacho-Lind A/S is a construction company based in Copenhagen with over 85 years of experience, specializing in infrastructure, concrete, and utility services. The company undertakes projects for both public and private clients, focusing on ar ... |
|||||
| Ransomware | Kaufman & Stigger id23340 View details | United States | Finance / Legal / Insurance | ||
|
When you call Kaufman & Stigger, PLLC Injury Lawyers, you will talk to a team with decades of experience helping people injured after an accident. Our Louisville-based law firm is focused exclusively on providing counsel to injured clients th ... |
|||||
| Ransomware | Omrin id23339 View details | Netherlands | Services | ||
|
Omrin is a leading waste management company in the Netherlands, dedicated to creating a clean and sustainable world. They provide a range of services including waste collection for over 1.6 million residents and 10,000 businesses, as well as ... |
|||||
| Ransomware | Doha British School id23328 View details | Qatar | Education | ||
|
Doha British School, Qatar - is one of the leading British international schools in Qatar, operating in the country since 1997. After 28 years, DBS has grown into a group of three outstanding campuses offering the English National Curriculum ... |
|||||
| Ransomware | ClearCare Periodontal & Implant Centre id23321 View details | Canada | Other | ||
|
The ClearCare Periodontal & Implant Centre was attacked on 13 of October 2025. At the time of the attack, critical data on customers and their employees was uploaded. The company was informed of the colossal data leak, but ignored demands to ... |
|||||
| Ransomware | IREM companies id23318 View details | United States | Construction / Real Estate | ||
|
IREM companies, USA - is an international institute for real estate and asset managers, promoting management through education and information exchange. IREM conducts real estate management training courses, organizes national meetings of rea ... |
|||||
| Ransomware | Gericke AG id23315 View details | Switzerland | Communication / Marketing | ||
|
The Swiss Gericke Group has been designing and manufacturing equipment and systems for modern bulk material processes, as well as providing design and consultation services, for more than 125 years. Gericke bulk materials processing technolog ... |
|||||
| Ransomware | NurseSpring id23297 View details | United States | Communication / Marketing | ||
|
NurseSpring specializes in home health care, health care staffing, and nurse recruitment services. They prioritize compassion, dignity, and respect while delivering care, ensuring clients receive the right care at the right time. Their intend ... |
|||||
| Ransomware | Integral Networks id23296 View details | United States | Telecommunications | ||
|
Integral Networks, Inc. is a leading IT services provider in Sacramento, specializing in responsive IT support tailored to the needs of legal firms and various other industries including construction, manufacturing, and finance. They offer a ... |
|||||
| Ransomware | Signet Armorlite, Inc. id23295 View details | United States | Communication / Marketing | ||
|
Founded in 1947, Signet Armorlite, Inc., an optical company, designs and manufactures glass ophthalmic lenses and molds. It also distributes lenses worldwide and adhesive optical supply products in the United States. Signet Armorlite is headq ... |
|||||
| Ransomware | All Truck Transportation id23294 View details | United States | Transportation / Travel / Logistics | ||
|
All Truck Transportation Co., Inc. is an asset-based carrier offering local and regional truckload transportation solutions. We are headquartered in Chicago, Illinois with a vast network of terminals throughout the Midwest. We operate within ... |
|||||
| Ransomware | Grupo Promasa id23293 View details | Mexico | Communication / Marketing | ||
|
Grupo Promasa is a company that operates in the Building Materials industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in San Pedro Sula, Cortes, Honduras. The amount of downloaded data is unknown at ... |
|||||