Ransomware Group intelligence

Qilin

Active

Track Qilin with 2594 published victims and 5 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 2594 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-09-18 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 1085 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2594 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 130 5.6%
  • Pending 2167 94.0%
  • Deleted 9 0.4%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 3 Onion service Up checked 4h ago ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Down checked 4h ago ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion
    Leak location 4 Onion service Down checked 4h ago b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 1 Onion service Down checked 4h ago ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Down checked 4h ago kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion

    Top Activity Sectors (18)

    Victims (2594)

    Search, filter and paginate the victim timeline for Qilin. Showing 2001–2100 of 2594.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware ProActive Solutions USA id21165 View details United States Communication / Marketing pending
    Ransomware VM Racing id21148 View details Italy Retail / E-commerce pending
    Ransomware Culver's Lawn & Landscape, Inc. id21145 View details United States Finance / Legal / Insurance pending
    Ransomware pinnacle Roofing and Exteriors id21124 View details United States Manufacturing / Engineering pending
    Ransomware fuld.com id21117 View details United States Finance / Legal / Insurance pending
    Ransomware www.intereum.com id21116 View details United States Healthcare / Pharma pending
    Ransomware nexa.bb id21115 View details Barbados Services pending
    Ransomware Darien Telephone id21114 View details United States Communication / Marketing pending
    Ransomware Accu Reference Medical Lab id21092 View details United States Healthcare / Pharma pending
    Ransomware Microf id21080 View details United States Communication / Marketing pending
    Ransomware volpatoindustrie.it id21052 View details Italy Communication / Marketing pending
    Ransomware Ridewill SRL id21009 View details Italy Retail / E-commerce pending
    Ransomware knightknox id20963 View details United Kingdom Communication / Marketing pending
    Ransomware Punta Del Agua id20958 View details Argentina Communication / Marketing pending
    Ransomware Cenomi Retail id20955 View details Japan Retail / E-commerce pending
    Ransomware vresystems.com id20943 View details United Kingdom Services pending
    Ransomware corpdvs.com id20942 View details United States Services pending
    Ransomware conlonproducts.net id20941 View details United States Communication / Marketing pending
    Ransomware https://www.injusa.com/ id20940 View details Spain Communication / Marketing pending
    Ransomware QUINTADAMARINHA.com id20939 View details Portugal Hospitality / Food & Beverage / Tourism pending
    Ransomware atlantissubmarines id20938 View details Barbados IT pending
    Ransomware fcsserves.org id20931 View details United States Communication / Marketing pending
    Ransomware Mainetti id20930 View details Italy Retail / E-commerce pending
    Ransomware villagecoin.com id20925 View details United States Retail / E-commerce pending
    Ransomware parsons-peebles.com id20924 View details United Kingdom Communication / Marketing pending
    Ransomware capmark.org id20923 View details United States Communication / Marketing pending
    Ransomware Alert Medical Alarms id20921 View details United States Healthcare / Pharma pending
    Ransomware LP Charpente id20920 View details France Construction / Real Estate pending
    Ransomware exhibits-intl.com id20918 View details United States Communication / Marketing pending
    Ransomware simmons-Boardman Publishing, Inc id20904 View details United States Communication / Marketing pending
    Ransomware semco-tech.com id20903 View details France IT pending
    Ransomware www.nuphoton.com id20902 View details United States Communication / Marketing pending
    Ransomware elpasoglass.com id20875 View details United States Retail / E-commerce pending
    Ransomware greatcdltraining.com id20874 View details United States Education pending
    Ransomware broadleafgame.com id20873 View details Japan Retail / E-commerce pending
    Ransomware buffalomarine.com id20872 View details United States Communication / Marketing pending
    Ransomware artexmanagement.com id20863 View details United States Services pending
    Ransomware norsk.global id20862 View details Norway Services pending
    Ransomware SiloKing id20861 View details Germany IT pending
    Ransomware Tappoo Group of Companies id20846 View details Fiji Retail / E-commerce pending
    Ransomware melilla.es id20845 View details Spain Communication / Marketing pending
    Ransomware Airedale Springs id20838 View details United Kingdom Communication / Marketing pending
    Ransomware Habitat for Humanity of Greater Sioux Falls, Inc. id20834 View details United States Communication / Marketing pending
    Ransomware Quaser Machine Tools, Inc id20833 View details Taiwan, Province of China Telecommunications pending
    Ransomware AEROBLOX id20831 View details United States Communication / Marketing pending
    Ransomware Tecore id20828 View details United States Telecommunications pending
    Ransomware gudeco.de id20827 View details Germany Manufacturing / Engineering pending
    Ransomware CMI id20820 View details United States Services pending
    Ransomware sbh id20808 View details Spain Hospitality / Food & Beverage / Tourism pending
    Ransomware www.covenanthealth.net id20800 View details United States Healthcare / Pharma pending
    Ransomware caldine id20784 View details Italy Education pending
    Ransomware Estes Forwarding Worldwide id20780 View details United States Transportation / Travel / Logistics pending
    Ransomware rioglass-solar id20764 View details United States Energy pending
    Ransomware SUSTA-STAMPI id20749 View details Italy Manufacturing / Engineering pending
    Ransomware januschke.at id20748 View details Austria Communication / Marketing pending
    Ransomware glwholesale.com id20744 View details United States Retail / E-commerce pending
    Ransomware realityfinance.com id20733 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware nardinifire.com id20732 View details Italy Services pending
    Ransomware hparchitecture.com id20731 View details United States Construction / Real Estate pending
    Ransomware kontek.com id20730 View details United States Services pending
    Ransomware mileschristi.org id20729 View details United States Other pending
    Ransomware accu-search.com id20728 View details United States Communication / Marketing pending
    Ransomware spacebridge.com id20727 View details Canada Telecommunications pending
    Ransomware nipro.com id20726 View details Japan Communication / Marketing pending
    Ransomware gmaxequine.com id20725 View details United Kingdom Communication / Marketing pending
    Ransomware fiestafranchise.com id20724 View details United States Finance / Legal / Insurance pending
    Ransomware spg.net id20676 View details Switzerland Communication / Marketing pending
    Ransomware moserengineering.com id20675 View details United States Manufacturing / Engineering pending
    Ransomware faycom id20643 View details Spain Manufacturing / Engineering pending
    Ransomware isd1.org id20639 View details United States Education pending
    Ransomware sgapl.com.au id20638 View details Australia Communication / Marketing pending
    Ransomware cypress id20637 View details United States Communication / Marketing pending
    Ransomware talismancivil.com id20630 View details Australia Manufacturing / Engineering pending
    Ransomware 550madison.com id20628 View details United States Construction / Real Estate pending
    Ransomware lakebook.com id20627 View details Switzerland Communication / Marketing pending
    Ransomware upstartpower.com id20626 View details United States Energy pending
    Ransomware dcinvestors.com id20625 View details United States Manufacturing / Engineering pending
    Ransomware biokplus.com id20624 View details Canada Communication / Marketing pending
    Ransomware haydist.com id20623 View details United States Retail / E-commerce pending
    Ransomware wilsonappliance.com id20622 View details United States Other pending
    Ransomware garmonandcompany.com id20621 View details United States Communication / Marketing pending
    Ransomware skirball.org id20617 View details United States Other pending
    Ransomware nucamprv.com id20615 View details United States Communication / Marketing pending
    Ransomware titantrailers.com id20614 View details Canada Manufacturing / Engineering pending
    Ransomware McCracken Financial Solutions id20613 View details United States Finance / Legal / Insurance pending
    Ransomware lawyersmutual.com id20610 View details United States Finance / Legal / Insurance pending
    Ransomware apollomd.com id20609 View details United States Communication / Marketing pending
    Ransomware www.waveny.org id20603 View details United States Communication / Marketing pending
    Ransomware www.kerrvilleisd.net id20601 View details United States Education pending
    Ransomware Asefa Insuarance id20600 View details Spain Construction / Real Estate pending
    Ransomware bioalleva id20599 View details Italy Communication / Marketing pending
    Ransomware fasse.com id20598 View details Germany Agriculture / Food pending
    Ransomware rmzoilfield.com id20551 View details Singapore Energy pending
    Ransomware palawancoop hospital id20550 View details Philippines Healthcare / Pharma pending
    Ransomware girv id20536 View details Italy Telecommunications pending
    Ransomware dugoni id20535 View details Italy Hospitality / Food & Beverage / Tourism pending
    Ransomware ecoter id20534 View details France Communication / Marketing pending
    Ransomware golf-schoenenberg.ch id20479 View details Switzerland Communication / Marketing pending
    Ransomware frylite.com id20478 View details Ireland Energy pending
    Ransomware regen.com id20477 View details United States Services pending