Ransomware Group intelligence

Qilin

Active

Track Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.

Victims 2263 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-08-03 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 991 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2263 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Unknown kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 3 Onion service Unknown ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 4 Onion service Unknown b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Unknown ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2263)

    Search, filter and paginate the victim timeline for Qilin. Showing 101–200 of 2263.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Cano Industrial id30768 View details Mexico Manufacturing / Engineering
    Ransomware Cano Industrial id30768 View details Mexico Manufacturing / Engineering
    Ransomware Triton Trading id30769 View details Peru Manufacturing / Engineering
    Ransomware Triton Trading id30769 View details Peru Manufacturing / Engineering
    Ransomware AppleOne Properties id30770 View details Philippines Manufacturing / Engineering
    Ransomware AppleOne Properties id30770 View details Philippines Manufacturing / Engineering
    Ransomware Sunway Berhad id30762 View details Malaysia Construction / Real Estate
    Ransomware Sunway Berhad id30762 View details Malaysia Construction / Real Estate
    Ransomware P & A Construction id30758 View details United States Construction / Real Estate
    Ransomware P & A Construction id30758 View details United States Construction / Real Estate
    Ransomware Primeline Logistics id30750 View details Ireland Transportation / Travel / Logistics
    Ransomware Primeline Logistics id30750 View details Ireland Transportation / Travel / Logistics
    Ransomware Recsa id30751 View details Costa Rica Manufacturing / Engineering
    Ransomware Recsa id30751 View details Costa Rica Manufacturing / Engineering
    Ransomware Salida Union School District id30752 View details United States Education
    Ransomware Salida Union School District id30752 View details United States Education
    Ransomware Cpcg id30754 View details Brazil Construction / Real Estate
    Ransomware Cpcg id30754 View details Brazil Construction / Real Estate
    Ransomware EFU Life Assurance id30755 View details Pakistan Healthcare / Pharma
    Ransomware EFU Life Assurance id30755 View details Pakistan Healthcare / Pharma
    Ransomware Infina Health id30756 View details United States Healthcare / Medicine
    Ransomware Infina Health id30756 View details United States Healthcare / Medicine
    Ransomware Evergreen Title id30738 View details United States Finance / Legal / Insurance
    Ransomware Evergreen Title id30738 View details United States Finance / Legal / Insurance
    Ransomware RehaVital Gesundheitsservice GmbH id30731 View details Germany Healthcare / Medicine
    Ransomware RehaVital Gesundheitsservice GmbH id30731 View details Germany Healthcare / Medicine
    Ransomware Postres Reina id30719 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware Postres Reina id30719 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware Bolt & Nut Manufacturing id30695 View details United Kingdom Manufacturing / Engineering
    Ransomware Bolt & Nut Manufacturing id30695 View details United Kingdom Manufacturing / Engineering
    Ransomware PP+K id30686 View details Brazil Education
    Ransomware PP+K id30686 View details Brazil Education
    Ransomware Eana id30687 View details Argentina Other
    Ransomware Eana id30687 View details Argentina Other
    Ransomware Synergy Products id30688 View details Türkiye Healthcare / Medicine
    Ransomware Synergy Products id30688 View details Türkiye Healthcare / Medicine
    Ransomware Don Tortaco Mexican Grill id30683 View details United States Retail / E-commerce
    Ransomware Don Tortaco Mexican Grill id30683 View details United States Retail / E-commerce
    Ransomware Associated Theatrical Contractors id30684 View details United States Construction / Real Estate
    Ransomware Associated Theatrical Contractors id30684 View details United States Construction / Real Estate
    Ransomware City Ambulance Service id30670 View details United States Healthcare / Medicine
    Ransomware City Ambulance Service id30670 View details United States Healthcare / Medicine
    Ransomware Famesa id30671 View details Peru Manufacturing / Engineering
    Ransomware Famesa id30671 View details Peru Manufacturing / Engineering
    Ransomware Heartland Catfish id30664 View details United States Agriculture / Food
    Ransomware Heartland Catfish id30664 View details United States Agriculture / Food
    Ransomware Salina Supply id30665 View details United States Retail / E-commerce
    Ransomware Salina Supply id30665 View details United States Retail / E-commerce
    Ransomware St Martha Catholic Church id30666 View details United States Healthcare / Medicine
    Ransomware St Martha Catholic Church id30666 View details United States Healthcare / Medicine
    Ransomware The Nueva School id30667 View details United States Education
    Ransomware The Nueva School id30667 View details United States Education
    Ransomware Sicc id30661 View details Italy Manufacturing / Engineering
    Ransomware Sicc id30661 View details Italy Manufacturing / Engineering
    Ransomware KLD Labs id30662 View details United States IT
    Ransomware KLD Labs id30662 View details United States IT
    Ransomware Armara id30663 View details France Retail / E-commerce
    Ransomware Armara id30663 View details France Retail / E-commerce
    Ransomware AK Preparedness id30659 View details United States Retail / E-commerce
    Ransomware AK Preparedness id30659 View details United States Retail / E-commerce
    Ransomware Powder River Heating & Air Conditioning id30649 View details United States Construction / Real Estate
    Ransomware Powder River Heating & Air Conditioning id30649 View details United States Construction / Real Estate
    Ransomware Droguería Martorani id30650 View details Argentina Retail / E-commerce
    Ransomware Droguería Martorani id30650 View details Argentina Retail / E-commerce
    Ransomware Cafar id30645 View details Argentina NGOs / Associations
    Ransomware Cafar id30645 View details Argentina NGOs / Associations
    Ransomware Acosol id30642 View details Spain Energy
    Ransomware Acosol id30642 View details Spain Energy
    Ransomware International Delights id30585 View details United States Retail / E-commerce
    Ransomware International Delights id30585 View details United States Retail / E-commerce
    Ransomware Feliubadaló id30571 View details Spain Other
    Ransomware Feliubadaló id30571 View details Spain Other
    Ransomware Levin Furniture id30570 View details United States Retail / E-commerce
    Ransomware Levin Furniture id30570 View details United States Retail / E-commerce
    Ransomware THL id30556 View details Finland Finance / Legal / Insurance
    Ransomware THL id30556 View details Finland Finance / Legal / Insurance
    Ransomware Sedemi id30538 View details Mexico IT
    Ransomware Sedemi id30538 View details Mexico IT
    Ransomware Counts & Dobyns id30532 View details United States Finance / Legal / Insurance
    Ransomware Counts & Dobyns id30532 View details United States Finance / Legal / Insurance
    Ransomware Centro Científico e Cultural de Macau id30533 View details Portugal Public Sector
    Ransomware Centro Científico e Cultural de Macau id30533 View details Portugal Public Sector
    Ransomware Jakub A.S. id30534 View details Czechia IT
    Ransomware Jakub A.S. id30534 View details Czechia IT
    Ransomware Cemoi id30535 View details France Agriculture / Food
    Ransomware Cemoi id30535 View details France Agriculture / Food
    Ransomware Busscar de Colombia id30536 View details Colombia Manufacturing / Engineering
    Ransomware Busscar de Colombia id30536 View details Colombia Manufacturing / Engineering
    Ransomware Hillebrand Home Health id30527 View details United States Healthcare / Medicine
    Ransomware Hillebrand Home Health id30527 View details United States Healthcare / Medicine
    Ransomware URH Hoteliers id30528 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware URH Hoteliers id30528 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware TitanTV, Inc. id30526 View details United States Other
    Ransomware TitanTV, Inc. id30526 View details United States Other
    Ransomware Century Equities id30495 View details United States Finance / Legal / Insurance
    Ransomware Century Equities id30495 View details United States Finance / Legal / Insurance
    Ransomware Retelit SpA PIVA id30496 View details Italy Telecommunications
    Ransomware Retelit SpA PIVA id30496 View details Italy Telecommunications
    Ransomware Carolina Agri-Power id30497 View details United States Construction / Real Estate
    Ransomware Carolina Agri-Power id30497 View details United States Construction / Real Estate