Ransomware Group intelligence

Qilin

Active

Track Qilin with 2594 published victims and 5 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 2594 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-09-18 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 1085 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2594 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 129 5.6%
  • Pending 2168 94.0%
  • Deleted 9 0.4%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 3 Onion service Up checked 4h ago ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Down checked 4h ago ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion
    Leak location 4 Onion service Down checked 4h ago b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 1 Onion service Down checked 4h ago ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Down checked 4h ago kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion

    Top Activity Sectors (18)

    Victims (2594)

    Search, filter and paginate the victim timeline for Qilin. Showing 2401–2500 of 2594.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Groupe Althays id15094 View details France IT pending
    Ransomware AIMS, Inc. Fuel Business Accounting Software, Jobber Software Wholesale Petroleum Acco id15093 View details United States IT pending
    Ransomware Freyberg Petroleum id15092 View details United States Energy pending
    Ransomware aziz oil id15091 View details United States Energy pending
    Ransomware PetroSouth id15090 View details Venezuela, Bolivarian Republic of Services pending
    Ransomware patria.hu id15089 View details Hungary Retail / E-commerce pending
    Ransomware McGaughey & Keaney CPAs id14586 View details United States Finance / Legal / Insurance pending
    Ransomware DPC DATA id14583 View details United States Construction / Real Estate pending
    Ransomware Forshey Prostok LLP id14561 View details United States Communication / Marketing pending
    Ransomware United Animal Health id14555 View details United States Healthcare / Pharma pending
    Ransomware performance-therapies id14545 View details United States Healthcare / Pharma pending
    Ransomware canstarrestorations.com id14524 View details Canada Construction / Real Estate pending
    Ransomware Keller Williams Realty Group id14520 View details United States Construction / Real Estate pending
    Ransomware McAbee Construction, Inc id14519 View details United States Construction / Real Estate pending
    Ransomware DETROIT PBS ( PUBLIC TV ) id14459 View details United States Public Sector pending
    Ransomware Luso Cuanzа id14455 View details Angola IT pending
    Ransomware Kravit, Hovel & Krawczyk SC id14430 View details United States Finance / Legal / Insurance pending
    Ransomware DIamond Contracting, LLC id14421 View details United States Construction / Real Estate pending
    Ransomware Detroit Public TV id14414 View details United States Public Sector pending
    Ransomware Canstar Restorations id14410 View details Canada Construction / Real Estate pending
    Ransomware Woodard , Hernandez , Roth & Day id14407 View details United States Finance / Legal / Insurance pending
    Ransomware KW Realty Group id14397 View details United States Services pending
    Ransomware Bertelkamp Automation id14358 View details United States Communication / Marketing pending
    Ransomware agricola id14355 View details Romania Agriculture / Food pending
    Ransomware EAGLE School id14297 View details United States Education pending
    Ransomware Kingsmill Resort id14270 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware kahle cpa id14218 View details United States Services pending
    Ransomware CAM Tyre Trade Systems & Solutions id14216 View details United Kingdom Services pending
    Ransomware atlanticice.com id14215 View details United States Communication / Marketing pending
    Ransomware Phoenix Air Conditioning & Heating id14214 View details United States Public Sector pending
    Ransomware Exitz Technologies id14213 View details India IT pending
    Ransomware Millsboro Animal Hospital id14205 View details United States Healthcare / Pharma pending
    Ransomware Arch Street Capital Advisors id14177 View details United States Construction / Real Estate pending
    Ransomware Turman id14149 View details United States Other pending
    Ransomware Risser Oil id14063 View details United States Energy pending
    Ransomware Stiller Aesthetics id14059 View details United States Healthcare / Pharma pending
    Ransomware JM Thompson id14042 View details United States Construction / Real Estate pending
    Ransomware codacinc.org id14030 View details United States Communication / Marketing pending
    Ransomware Mason City Recycling Center id14018 View details United States Public Sector pending
    Ransomware Brookshire Dental - Hospitals & Clinics id14001 View details United States Healthcare / Pharma pending
    Ransomware Penn Veterinary Supply INC id13985 View details United States Healthcare / Pharma pending
    Ransomware Meli (BCYF & Bethany) id13984 View details Australia Services pending
    Ransomware dt-technologies id13983 View details France IT pending
    Ransomware Prefeitura do Jaboatão dos Guararapes id13858 View details Brazil Communication / Marketing pending
    Ransomware on365.co.uk id13857 View details United Kingdom Communication / Marketing pending
    Ransomware Hiesmayr Haustechnik id13855 View details Austria IT pending
    Ransomware promises2kids.org id13853 View details United States Communication / Marketing pending
    Ransomware ccj.edu.lb id13852 View details Lebanon Education pending
    Ransomware Patterson Health Center id13847 View details United States Healthcare / Pharma pending
    Ransomware www.prinsotel.com id13846 View details Spain Communication / Marketing pending
    Ransomware Brookshire Dental id13788 View details United States Healthcare / Pharma pending
    Ransomware Amco Metal Industrial Corporation id13782 View details United States Manufacturing / Engineering pending
    Ransomware New TSI Holdings, NYSC id13755 View details United States Public Sector pending
    Ransomware www.srmedicalcenter.org id13630 View details United States Healthcare / Pharma pending
    Ransomware Network Communications Group id13619 View details United Kingdom Telecommunications pending
    Ransomware ayurcan id13585 View details Canada Communication / Marketing pending
    Ransomware KMLG id13536 View details Pakistan Manufacturing / Engineering pending
    Ransomware EHS Partnerships id13535 View details Canada Services pending
    Ransomware simple-solution-systems id13513 View details Singapore Services pending
    Ransomware Next step healthcar id13423 View details United States Healthcare / Pharma pending
    Ransomware ZSZAALEJI.cz id13408 View details Czechia Education pending
    Ransomware The Wacks Law Group id13279 View details United States Finance / Legal / Insurance pending
    Ransomware pomalca.com.pe id13278 View details Peru Communication / Marketing pending
    Ransomware YKS id13169 View details Türkiye Other pending
    Ransomware Ashtons Legal LLP id13099 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware prinsotel.com id13096 View details Spain Communication / Marketing pending
    Ransomware Wise Construction id13091 View details United States Construction / Real Estate pending
    Ransomware Synnovis id13071 View details United Kingdom Healthcare / Pharma pending
    Ransomware kinslerfamilydentistry id13064 View details United States Healthcare / Pharma pending
    Ransomware northcottage.com id13054 View details United States Communication / Marketing pending
    Ransomware St Vincent de Paul Catholic School id13050 View details United States Education pending
    Ransomware Next Step Healthcare id13038 View details United States Healthcare / Pharma pending
    Ransomware svmasonry.com id13020 View details United States Construction / Real Estate pending
    Ransomware EnviroApplications id13018 View details United States Finance / Legal / Insurance pending
    Ransomware Bock & Associates, LLP id13004 View details United States Finance / Legal / Insurance pending
    Ransomware hydefuel.com id12987 View details United States Energy pending
    Ransomware a-agroup id12949 View details United States Construction / Real Estate pending
    Ransomware Above All Store Fronts id12931 View details United States Retail / E-commerce pending
    Ransomware PFAM id12930 View details United States Communication / Marketing pending
    Ransomware Logimodal Operações Logísticas id12929 View details Brazil Other pending
    Ransomware Allied Toyota Lift id12928 View details United States Manufacturing / Engineering pending
    Ransomware Datanet id12732 View details United States Construction / Real Estate pending
    Ransomware Golden Acre id12671 View details Canada Retail / E-commerce pending
    Ransomware Shyang Shin Bao Ind. Co., Ltd. (hereinafter referred to as ''SSB'') id12599 View details Taiwan, Province of China Services pending
    Ransomware Consulting Radiologists id12569 View details United States Services pending
    Ransomware FIAB SpA id12568 View details Italy Other pending
    Ransomware Municipalité La Guadeloupe id12527 View details France Public Sector pending
    Ransomware McSweeney / Langevin id12503 View details United States Finance / Legal / Insurance pending
    Ransomware Edlong id12464 View details United States Communication / Marketing pending
    Ransomware Holstein Association USA id12393 View details United States NGOs / Associations pending
    Ransomware Intuitae id12380 View details Luxembourg Communication / Marketing pending
    Ransomware Tholen Building Technology Group id12379 View details Germany IT pending
    Ransomware williamsrdm.com id12378 View details United States Manufacturing / Engineering pending
    Ransomware inforius id12377 View details Belgium Telecommunications pending
    Ransomware The Weinstein Firm id12333 View details United States Other pending
    Ransomware Dr Charles A Evans id12268 View details United States Healthcare / Pharma pending
    Ransomware MCS id12255 View details United States Public Sector pending
    Ransomware Tohlen Building Technology Group id12254 View details Germany IT pending
    Ransomware watergate id12241 View details Germany Hospitality / Food & Beverage / Tourism pending
    Ransomware Beloinlaw id12136 View details United States Finance / Legal / Insurance pending