Ransomware Group intelligence

Qilin

Active

Track Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.

Victims 2263 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-08-03 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 991 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2263 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Unknown kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 3 Onion service Unknown ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 4 Onion service Unknown b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Unknown ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2263)

    Search, filter and paginate the victim timeline for Qilin. Showing 1801–1900 of 2263.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Lasercam id20283 View details Germany Communication / Marketing
    Ransomware www.nexus.edu.my id20275 View details Malaysia Communication / Marketing
    Ransomware Centralno grijanje Tuzla id20271 View details Bosnia and Herzegovina Communication / Marketing
    Ransomware elitavia.com id20212 View details Slovenia Services
    Ransomware Berko İlaç Ve Ki̇mya San Aş id20204 View details Türkiye Healthcare / Pharma
    Ransomware www.bestop.com id20196 View details United States Retail / E-commerce
    Ransomware radiologue.paris id20194 View details France Healthcare / Pharma
    Ransomware Cacspmec id20183 View details Ecuador Finance / Legal / Insurance
    Ransomware The Holiday:Adult Care Community & Retirement Homes id20180 View details United States Healthcare / Pharma
    Ransomware tennsco.com id20152 View details United States Manufacturing / Engineering
    Ransomware edgeanalytical.com id20136 View details United States Communication / Marketing
    Ransomware blainemn.gov id20103 View details United States Communication / Marketing
    Ransomware abilenetx.gov id20102 View details United States Construction / Real Estate
    Ransomware gmb.com id20101 View details United States Manufacturing / Engineering
    Ransomware chreynolds.com id20100 View details United States Communication / Marketing
    Ransomware cwcglobal.com id20099 View details United Kingdom Agriculture / Food
    Ransomware gestionnaireimmobilier.ca id20098 View details Canada Construction / Real Estate
    Ransomware compagnons-du-devoir.com id20097 View details France NGOs / Associations
    Ransomware aldersonlaw.com id20096 View details United Kingdom Finance / Legal / Insurance
    Ransomware scelltech.com id20095 View details France IT
    Ransomware Straits Construction id20082 View details Singapore Construction / Real Estate
    Ransomware MKA Accountants: Business Advisers, Moonee Ponds VIC id20025 View details Australia Services
    Ransomware ITinSell group id20024 View details France Communication / Marketing
    Ransomware www.cmic-cmo.com id20011 View details Japan Healthcare / Pharma
    Ransomware SHRADERLAW id19942 View details United States Finance / Legal / Insurance
    Ransomware www.hcsheriff.gov id19941 View details United States Public Sector
    Ransomware mdgny.com id19857 View details United States Construction / Real Estate
    Ransomware clinpath.com id19856 View details United States Communication / Marketing
    Ransomware gslelectric.com id19855 View details United States Manufacturing / Engineering
    Ransomware jbanksdesign.com id19854 View details United States Finance / Legal / Insurance
    Ransomware gates-cooper.com id19853 View details United States Communication / Marketing
    Ransomware NSS 長崎船舶装備株式会社 id19768 View details Japan Construction / Real Estate
    Ransomware HCI Informatique d'entreprise id19713 View details France Communication / Marketing
    Ransomware Megachem Singapore id19711 View details Singapore Manufacturing / Engineering
    Ransomware www.newseason.com id19670 View details United States Healthcare / Pharma
    Ransomware cobbcounty id19669 View details United States Public Sector
    Ransomware www.ancc.org id19663 View details United States Retail / E-commerce
    Ransomware MALAYSIA AIRPORTS HOLDINGS BERHAD Part 1 of data taken !!! id19657 View details Malaysia Transportation / Travel
    Ransomware Matrix New World Engineering id19648 View details United States Manufacturing / Engineering
    Ransomware mossyoak.com id19642 View details United States Other
    Ransomware dlcid.com id19641 View details United States Healthcare / Pharma
    Ransomware bostonconveyorandautomation.com id19640 View details United States Public Sector
    Ransomware nuovadfl.it id19639 View details Italy Communication / Marketing
    Ransomware rfsd13.org id19638 View details Education
    Ransomware SoloVue id19628 View details Services
    Ransomware CCHC Healthcare id19603 View details United States Healthcare / Pharma
    Ransomware nccer.org id19602 View details United States Construction / Real Estate
    Ransomware Dermatologists of Birmingham id19601 View details United States Healthcare / Pharma
    Ransomware MALAYSIA AIRPORTS HOLDINGS BERHAD id19600 View details Malaysia Transportation / Travel
    Ransomware www.latouchepediatrics.com id19599 View details United States Communication / Marketing
    Ransomware govcz id19598 View details Czechia Public Sector
    Ransomware Whitley Law Firm id19596 View details United States Finance / Legal / Insurance
    Ransomware RC Manubhai id19594 View details Fiji Finance / Legal / Insurance
    Ransomware www.southlandscs.com id19588 View details United States Education
    Ransomware liftsolutionsinc.net id19582 View details United States Services
    Ransomware Penderels Trust id19581 View details United Kingdom Communication / Marketing
    Ransomware www.unitedcaps.com id19308 View details Luxembourg Services
    Ransomware parrishleasing.com id19289 View details United States Services
    Ransomware Richmond СPA id19280 View details United States Services
    Ransomware Dominion Lending Centres id19275 View details Canada Communication / Marketing
    Ransomware The Michelson Organization id19269 View details United States Construction / Real Estate
    Ransomware farma id19242 View details Argentina Agriculture / Food
    Ransomware www.monaghan.eu id19241 View details Ireland Retail / E-commerce
    Ransomware 1sthealthinc.com id19233 View details United States Healthcare / Pharma
    Ransomware accesssmt.com id19231 View details United States Construction / Real Estate
    Ransomware yankeetrails.com id19228 View details United States Transportation / Travel / Logistics
    Ransomware universalwindow.com id19227 View details United States Energy
    Ransomware bertie.k12.nc.us id19226 View details United States Education
    Ransomware www.nelson.edu id19204 View details United States Education
    Ransomware govonisabbiatrici id19187 View details Italy Manufacturing / Engineering
    Ransomware a-1freeman id19180 View details United States Public Sector
    Ransomware www.clubcar.com id19176 View details United States Manufacturing / Engineering
    Ransomware NL Olson & Associates id19163 View details United States Finance / Legal / Insurance
    Ransomware CDI id19162 View details Canada Construction / Real Estate
    Ransomware FEELFOUR id19112 View details Singapore Retail / E-commerce
    Ransomware MS SUPPLY CHAIN SOLUTIONS (MALAYSIA) SDN. BHD id19106 View details Malaysia Transportation / Travel / Logistics
    Ransomware Mapaex id19105 View details India Communication / Marketing
    Ransomware sk.com id19077 View details Korea, Republic of Services
    Ransomware Algas Engineering Pte Ltd - Algas Engineering id19076 View details Singapore Energy
    Ransomware Dinaksa Pesaje id19069 View details Spain Telecommunications
    Ransomware Sasszemklinika id19068 View details Hungary Healthcare / Pharma
    Ransomware MHT Partners id19067 View details United States Finance / Legal / Insurance
    Ransomware SPEEDFAM id19066 View details Japan Manufacturing / Engineering
    Ransomware Blink Photo id19065 View details United Kingdom Communication / Marketing
    Ransomware North Platte Natural Resources District id19064 View details United States Communication / Marketing
    Ransomware Galvatech id19063 View details Australia IT
    Ransomware Helitek Company Ltd. id19062 View details Thailand Communication / Marketing
    Ransomware Bangkok Electronics Co., Ltd id19061 View details Thailand Manufacturing / Engineering
    Ransomware www.gchd.org id19045 View details United States Healthcare / Pharma
    Ransomware averasia id19044 View details Singapore Communication / Marketing
    Ransomware Cambridge Fluid Systems id19032 View details United Kingdom Communication / Marketing
    Ransomware The Komec id19031 View details Belgium Manufacturing / Engineering
    Ransomware Spring Creek Golf & Country Club id19030 View details United States Communication / Marketing
    Ransomware JKC Australia LNG id19029 View details Australia Finance / Legal / Insurance
    Ransomware American Air Conditioning & Heating id19028 View details United States Communication / Marketing
    Ransomware Dhoot Transmission id19027 View details India Manufacturing / Engineering
    Ransomware Privat-Spitex Schweiz GmbH id19026 View details Switzerland Communication / Marketing
    Ransomware Baucenter.it id19017 View details Italy Communication / Marketing
    Ransomware sunbayhotel.com id19016 View details Barbados Hospitality / Food & Beverage / Tourism
    Ransomware Dalincoln id19015 View details United States Construction / Real Estate