Ransomware Group intelligence

Qilin

Active

Track Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.

Victims 2263 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-08-03 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 991 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2263 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Unknown kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 3 Onion service Unknown ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 4 Onion service Unknown b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Unknown ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2263)

    Search, filter and paginate the victim timeline for Qilin. Showing 801–900 of 2263.

    Type Target Discovered Country Business Category Intel Link
    Ransomware On-Point Defense Technologies id26438 View details United States IT
    Ransomware Tower Insurance Services id26433 View details United States Finance / Legal / Insurance
    Ransomware Topkin & Partlow id26432 View details United States Finance / Legal / Insurance
    Ransomware Andringa Law id26423 View details United States Finance / Legal / Insurance
    Ransomware Cox & Sanchez id26422 View details United States Other
    Ransomware Lindenhurst Fire Department id26421 View details United States Public Sector
    Ransomware Mississippi Market id26420 View details United States Retail / E-commerce
    Ransomware ZeroEnergy Design id26419 View details United States Energy
    Ransomware PowerON Services id26418 View details United States Energy
    Ransomware Castles Technology UK & Ireland id26417 View details United Kingdom IT
    Ransomware Mt Barker Co-Operative id26416 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware C4 (Carroll County Cannabis Co. id26394 View details United States Public Sector
    Ransomware Anabuki Kosan id26391 View details Japan Other
    Ransomware Tech Environmental id26384 View details United States IT
    Ransomware uniquegas id26383 View details Singapore Energy
    Ransomware Augusta Housing Authority id26382 View details United States Construction / Real Estate
    Ransomware iQ NetSolutions id26381 View details United States Services
    Ransomware Body By Fisher id26378 View details United States Other
    Ransomware Gradient Wind Engineering id26377 View details Canada Energy
    Ransomware AB Data id26371 View details United States Other
    Ransomware Voyages Robin id26369 View details France Other
    Ransomware granmanor.org id26363 View details United States Other
    Ransomware zeroenergy.com id26362 View details United States Energy
    Ransomware poweron.com id26361 View details United States Energy
    Ransomware castlestechemea.com id26360 View details Germany IT
    Ransomware abdata.com id26359 View details Germany Other
    Ransomware voyages-robin.com id26358 View details France Other
    Ransomware Municipio de Chihuahua id26357 View details Mexico Other
    Ransomware PARIS & MARSEILLE id26278 View details France Other
    Ransomware AMR PEMCO id26269 View details United States Other
    Ransomware Parente Fireworks id26259 View details Italy Other
    Ransomware La Fabrica id26236 View details Spain Other
    Ransomware University of Applied Sciences,Worms id26221 View details Germany Education
    Ransomware Conpet S.A. (COTE.RO) id26220 View details Romania Other
    Ransomware Kopas Cosmetics id26210 View details Türkiye Other
    Ransomware MB Distribution id26107 View details Romania Other
    Ransomware RENAFAN id26106 View details Germany Other
    Ransomware Chèvre & Rutsch & Herren Notariatsbüro id26105 View details Switzerland Other
    Ransomware ChainPower Technology id26104 View details Taiwan, Province of China IT
    Ransomware JOSE COMBALIA SA id26103 View details Spain Other
    Ransomware RC Collecting id26101 View details Argentina Other
    Ransomware Jingchang Enterprise Co., Ltd id26093 View details China Communication / Marketing
    Ransomware Medasa id26090 View details Spain Other
    Ransomware Medinah School District 11 id26081 View details United States Education
    Ransomware Muebles Dico id26080 View details Mexico Other
    Ransomware Workers Health & Safety Centre id26074 View details Canada Healthcare / Pharma
    Ransomware Range Cooperatives id26073 View details United States Other
    Ransomware The Hechtman Group id26072 View details United States Services
    Ransomware KOUEI id26071 View details Japan Other
    Ransomware Exterior Worlds id26068 View details United States Other
    Ransomware Jcm Agricola id26063 View details Spain Agriculture / Food
    Ransomware INGUS id26062 View details Germany Other
    Ransomware Sprokkit id26061 View details United States Communication / Marketing
    Ransomware Stephenson Ziegenhorn & Bernard id26060 View details United States Finance / Legal / Insurance
    Ransomware SoCal ROC id26045 View details United States Other
    Ransomware MBC id26000 View details Korea, Republic of Other
    Ransomware Cooperativa de Hostelería de Navarra id25999 View details Spain Other
    Ransomware Trace id25998 View details France Other
    Ransomware Esperance Communications id25997 View details Australia Communication / Marketing
    Ransomware Littlefield Companies id25995 View details United States Other
    Ransomware Rich Sport Public id25994 View details Thailand Public Sector
    Ransomware Tulsa International Airport id25987 View details United States Transportation / Travel
    Ransomware Moontown id25914 View details United Kingdom Other
    Ransomware Keil Erdbau id25913 View details Austria Other
    Ransomware Philippine Savings Bank (Metrobank Group) id25895 View details Philippines Finance / Legal / Insurance
    Ransomware InfoCom id25894 View details Germany Other
    Ransomware Valbifrut id25893 View details Chile Other
    Ransomware Chu & Yang Dental id25892 View details United States Healthcare / Pharma
    Ransomware KRÜSS id25891 View details Germany Other
    Ransomware Service Broadcasting Group id25890 View details United States Services
    Ransomware NessCampbell id25889 View details United States Other
    Ransomware Sukhothai Thammathirat Open University id25841 View details Thailand Education
    Ransomware Mills Products id25812 View details United States Communication / Marketing
    Ransomware Centrotherm International id25811 View details Germany Services
    Ransomware OKIN GROUP id25764 View details Spain Services
    Ransomware Şemsioğlu Uşak Ev Tarhanası id25763 View details Türkiye Other
    Ransomware Shiffler Equipment Sales id25747 View details United States Retail / E-commerce
    Ransomware Herzing id25746 View details United States Other
    Ransomware HARTE-BAVENDAMM Rechtsanwlte PartG mbB id25745 View details Germany Other
    Ransomware Borg Argentina id25744 View details Argentina Other
    Ransomware D & D Building id25743 View details United States Construction / Real Estate
    Ransomware Milott Laboratories id25737 View details Thailand Other
    Ransomware YCC Parts Mfg id25726 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware EDF Group id25705 View details United States Services
    Ransomware SiNetCon id25704 View details United States Other
    Ransomware Farmacias Vilela id25703 View details Spain Agriculture / Food
    Ransomware Proleasing id25702 View details Argentina Communication / Marketing
    Ransomware Copetrol id25699 View details Paraguay Other
    Ransomware Mutest id25680 View details France Other
    Ransomware Centro de Desarrollo Emprendedor Ensenada id25679 View details Mexico Communication / Marketing
    Ransomware Kontena Nasional Berhad id25624 View details Malaysia Other
    Ransomware Altius Geotecnia y Obras Especiales id25616 View details Spain Other
    Ransomware Yumark Enterprises id25599 View details Hong Kong Communication / Marketing
    Ransomware Casadei id25594 View details Italy Other
    Ransomware Dreher Law Firm id25578 View details United States Finance / Legal / Insurance
    Ransomware Jampen Holzbau AG id25577 View details Switzerland Other
    Ransomware University Volkswagen Mazda id25576 View details United States Education
    Ransomware Vietnam Airlines id25575 View details Viet Nam Transportation / Travel / Logistics
    Ransomware Balneario id25574 View details Spain Other
    Ransomware Orthopaedic Specialists of Massachusetts id25569 View details United States Other