Ransomware Group intelligence

Qilin

Active

Track Qilin with 2594 published victims and 5 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 2594 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-09-18 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 1085 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2594 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 130 5.6%
  • Pending 2167 94.0%
  • Deleted 9 0.4%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 3 Onion service Up checked 4h ago ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Down checked 4h ago ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion
    Leak location 4 Onion service Down checked 4h ago b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 1 Onion service Down checked 4h ago ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Down checked 4h ago kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion

    Top Activity Sectors (18)

    Victims (2594)

    Search, filter and paginate the victim timeline for Qilin. Showing 2201–2300 of 2594.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware govonisabbiatrici id19187 View details Italy Manufacturing / Engineering pending
    Ransomware a-1freeman id19180 View details United States Public Sector pending
    Ransomware www.clubcar.com id19176 View details United States Manufacturing / Engineering pending
    Ransomware NL Olson & Associates id19163 View details United States Finance / Legal / Insurance pending
    Ransomware CDI id19162 View details Canada Construction / Real Estate pending
    Ransomware FEELFOUR id19112 View details Singapore Retail / E-commerce pending
    Ransomware MS SUPPLY CHAIN SOLUTIONS (MALAYSIA) SDN. BHD id19106 View details Malaysia Transportation / Travel / Logistics pending
    Ransomware Mapaex id19105 View details India Communication / Marketing pending
    Ransomware sk.com id19077 View details Korea, Republic of Services pending
    Ransomware Algas Engineering Pte Ltd - Algas Engineering id19076 View details Singapore Energy pending
    Ransomware Dinaksa Pesaje id19069 View details Spain Telecommunications pending
    Ransomware Sasszemklinika id19068 View details Hungary Healthcare / Pharma pending
    Ransomware MHT Partners id19067 View details United States Finance / Legal / Insurance pending
    Ransomware SPEEDFAM id19066 View details Japan Manufacturing / Engineering pending
    Ransomware Blink Photo id19065 View details United Kingdom Communication / Marketing pending
    Ransomware North Platte Natural Resources District id19064 View details United States Communication / Marketing pending
    Ransomware Galvatech id19063 View details Australia IT pending
    Ransomware Helitek Company Ltd. id19062 View details Thailand Communication / Marketing pending
    Ransomware Bangkok Electronics Co., Ltd id19061 View details Thailand Manufacturing / Engineering pending
    Ransomware www.gchd.org id19045 View details United States Healthcare / Pharma pending
    Ransomware averasia id19044 View details Singapore Communication / Marketing pending
    Ransomware Cambridge Fluid Systems id19032 View details United Kingdom Communication / Marketing pending
    Ransomware The Komec id19031 View details Belgium Manufacturing / Engineering pending
    Ransomware Spring Creek Golf & Country Club id19030 View details United States Communication / Marketing pending
    Ransomware JKC Australia LNG id19029 View details Australia Finance / Legal / Insurance pending
    Ransomware American Air Conditioning & Heating id19028 View details United States Communication / Marketing pending
    Ransomware Dhoot Transmission id19027 View details India Manufacturing / Engineering pending
    Ransomware Privat-Spitex Schweiz GmbH id19026 View details Switzerland Communication / Marketing pending
    Ransomware Baucenter.it id19017 View details Italy Communication / Marketing pending
    Ransomware sunbayhotel.com id19016 View details Barbados Hospitality / Food & Beverage / Tourism pending
    Ransomware Dalincoln id19015 View details United States Construction / Real Estate pending
    Ransomware Flo Components id19014 View details Canada Manufacturing / Engineering pending
    Ransomware St Edmund's College id19013 View details United Kingdom Education pending
    Ransomware Hewsco.com id19012 View details United States Healthcare / Pharma pending
    Ransomware Wertex Group id19011 View details Poland Communication / Marketing pending
    Ransomware Optimax Technology id18983 View details Taiwan, Province of China IT pending
    Ransomware Sinari's software POC id18961 View details France IT pending
    Ransomware amourgis.com id18960 View details United States Finance / Legal / Insurance pending
    Ransomware yuagam id18955 View details Türkiye Healthcare / Pharma pending
    Ransomware raymurray.com id18950 View details United States Energy pending
    Ransomware dgr.at id18949 View details Austria Construction / Real Estate pending
    Ransomware yumaspazio.com id18948 View details Spain Manufacturing / Engineering pending
    Ransomware Doumen id18927 View details China Other pending
    Ransomware caliendoarchitects.com id18907 View details United States Other pending
    Ransomware Groupe Sinari id18871 View details Niger IT pending
    Ransomware Bunger Steel id18859 View details United States Manufacturing / Engineering pending
    Ransomware TEPAS id18836 View details Türkiye Communication / Marketing pending
    Ransomware hardmanjohnston.com id18794 View details United States Communication / Marketing pending
    Ransomware charlesjones.ca id18793 View details Canada Agriculture / Food pending
    Ransomware blue-hive.com id18792 View details United States Communication / Marketing pending
    Ransomware derianhouse.co.uk id18791 View details United Kingdom Communication / Marketing pending
    Ransomware bedfordma.gov id18790 View details United States Public Sector pending
    Ransomware frazerllp.com id18789 View details United States Other pending
    Ransomware mmmbs.net id18788 View details United States Healthcare / Pharma pending
    Ransomware agakam id18757 View details France Services pending
    Ransomware acm id18754 View details Singapore Services pending
    Ransomware wieso-cert id18753 View details Germany Healthcare / Pharma pending
    Ransomware Wildeck Inc id18749 View details United States Services pending
    Ransomware Ebassi.com (E.B. Archbald and Associates) id18737 View details United Kingdom IT pending
    Ransomware gettys.com id18705 View details United States Healthcare / Pharma pending
    Ransomware Primary Flow Signal: Flow Meters | Flow Measurement id18704 View details United States Communication / Marketing pending
    Ransomware Wheels and Deals id18665 View details United States Manufacturing / Engineering pending
    Ransomware Groupe des Industries Métallurgiques id18631 View details France Manufacturing / Engineering pending
    Ransomware Subsurfco LLC id18572 View details United States Manufacturing / Engineering pending
    Ransomware Luff Industries id18536 View details Canada Manufacturing / Engineering pending
    Ransomware Los Madroños Hospital id18522 View details Spain Healthcare / Pharma pending
    Ransomware PTS Group id18497 View details Germany Services pending
    Ransomware Cleveland Municipal Court id18493 View details United States Public Sector pending
    Ransomware Lepant Law Office id18475 View details Spain Finance / Legal / Insurance pending
    Ransomware Worldlawn Power Equipment id18474 View details United States Finance / Legal / Insurance pending
    Ransomware Diode Technologies id18473 View details United States IT pending
    Ransomware SMC Corporation id18462 View details Japan Manufacturing / Engineering pending
    Ransomware Ricardo Rodriguez id18430 View details Chile Communication / Marketing pending
    Ransomware World Wide Fittings id18401 View details United States Manufacturing / Engineering pending
    Ransomware Yushin America, Inc id18372 View details United States Manufacturing / Engineering pending
    Ransomware CAHOKIA CUSD 187 SCHOOL DISTRICT id18363 View details United States Education pending
    Ransomware HOST Software Entwicklung und Consulting GmbH id18353 View details Germany IT pending
    Ransomware Gaines County, Texas id18335 View details United States Public Sector pending
    Ransomware Suder&Suder id18333 View details Poland Manufacturing / Engineering pending
    Ransomware Dacas Argentina id18295 View details Argentina Communication / Marketing pending
    Ransomware prelco.ca id18278 View details Canada Communication / Marketing pending
    Ransomware KH OneStop id18277 View details Denmark Transportation / Travel / Logistics pending
    Ransomware www.cdg.us id18243 View details United States Communication / Marketing pending
    Ransomware Connekted, Inc. id18219 View details United States Services pending
    Ransomware Ministry of Foreign Affairs of Ukraine id18216 View details Ukraine Public Sector pending
    Ransomware Chicago Doorways, LLC id18177 View details United States Services pending
    Ransomware PFS Grupo - Plan de igualdad, Sostenibilidad id18169 View details Spain Communication / Marketing pending
    Ransomware rockhillwc.com id18158 View details United States Communication / Marketing pending
    Ransomware bpmmicro.com id18157 View details United States Communication / Marketing pending
    Ransomware peruzzi.com id18156 View details Peru Communication / Marketing pending
    Ransomware Utsunomiya Central Clinic id18135 View details Japan Healthcare / Pharma pending
    Ransomware Ministry of Health of Palau id18095 View details Palau Healthcare / Pharma pending
    Ransomware ctpomd id18091 View details United States Other pending
    Ransomware Houston Symphony id18090 View details United States Other pending
    Ransomware Lee Enterprises id18085 View details United States Communication / Marketing pending
    Ransomware Soco systems id17838 View details Denmark Telecommunications pending
    Ransomware Sound Ideas id17817 View details Canada Healthcare / Pharma pending
    Ransomware Surface 678 id17815 View details United States Construction / Real Estate pending
    Ransomware Metro Supply Chain Group. id17744 View details Canada Transportation / Travel / Logistics pending
    Ransomware l.warsemann.fr id17687 View details France Other pending