We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Qilin

Active

Track Qilin with 2686 published victims and 5 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 2686 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-11-03 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 1163 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2686 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 448 16.7%
  • Pending 2228 82.9%
  • Deleted 10 0.4%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 3 Onion service Up checked 3h ago ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Down checked 3h ago ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion
    Leak location 2 Onion service Down checked 3h ago kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 4 Onion service Down checked 3h ago b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 1 Onion service Down checked 3h ago ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion

    Top Activity Sectors (18)

    Victims (2686)

    Search, filter and paginate the victim timeline for Qilin. Showing 2501–2600 of 2686.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Forshey Prostok LLP id14561 View details United States Communication / Marketing pending
    Ransomware United Animal Health id14555 View details United States Healthcare / Pharma pending
    Ransomware performance-therapies id14545 View details United States Healthcare / Pharma pending
    Ransomware canstarrestorations.com id14524 View details Canada Construction / Real Estate pending
    Ransomware Keller Williams Realty Group id14520 View details United States Construction / Real Estate pending
    Ransomware McAbee Construction, Inc id14519 View details United States Construction / Real Estate pending
    Ransomware DETROIT PBS ( PUBLIC TV ) id14459 View details United States Public Sector pending
    Ransomware Luso Cuanzа id14455 View details Angola IT pending
    Ransomware Kravit, Hovel & Krawczyk SC id14430 View details United States Finance / Legal / Insurance pending
    Ransomware DIamond Contracting, LLC id14421 View details United States Construction / Real Estate pending
    Ransomware Detroit Public TV id14414 View details United States Public Sector pending
    Ransomware Canstar Restorations id14410 View details Canada Construction / Real Estate pending
    Ransomware Woodard , Hernandez , Roth & Day id14407 View details United States Finance / Legal / Insurance pending
    Ransomware KW Realty Group id14397 View details United States Services pending
    Ransomware Bertelkamp Automation id14358 View details United States Communication / Marketing pending
    Ransomware agricola id14355 View details Romania Agriculture / Food pending
    Ransomware EAGLE School id14297 View details United States Education pending
    Ransomware Kingsmill Resort id14270 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware kahle cpa id14218 View details United States Services pending
    Ransomware CAM Tyre Trade Systems & Solutions id14216 View details United Kingdom Services pending
    Ransomware atlanticice.com id14215 View details United States Communication / Marketing pending
    Ransomware Phoenix Air Conditioning & Heating id14214 View details United States Public Sector pending
    Ransomware Exitz Technologies id14213 View details India IT pending
    Ransomware Millsboro Animal Hospital id14205 View details United States Healthcare / Pharma pending
    Ransomware Arch Street Capital Advisors id14177 View details United States Construction / Real Estate pending
    Ransomware Turman id14149 View details United States Other pending
    Ransomware Risser Oil id14063 View details United States Energy pending
    Ransomware Stiller Aesthetics id14059 View details United States Healthcare / Pharma pending
    Ransomware JM Thompson id14042 View details United States Construction / Real Estate leaked
    Ransomware codacinc.org id14030 View details United States Communication / Marketing pending
    Ransomware Mason City Recycling Center id14018 View details United States Public Sector pending
    Ransomware Brookshire Dental - Hospitals & Clinics id14001 View details United States Healthcare / Pharma pending
    Ransomware Penn Veterinary Supply INC id13985 View details United States Healthcare / Pharma pending
    Ransomware Meli (BCYF & Bethany) id13984 View details Australia Services pending
    Ransomware dt-technologies id13983 View details France IT pending
    Ransomware Prefeitura do Jaboatão dos Guararapes id13858 View details Brazil Communication / Marketing pending
    Ransomware on365.co.uk id13857 View details United Kingdom Communication / Marketing pending
    Ransomware Hiesmayr Haustechnik id13855 View details Austria IT pending
    Ransomware promises2kids.org id13853 View details United States Communication / Marketing pending
    Ransomware ccj.edu.lb id13852 View details Lebanon Education pending
    Ransomware Patterson Health Center id13847 View details United States Healthcare / Pharma pending
    Ransomware www.prinsotel.com id13846 View details Spain Communication / Marketing pending
    Ransomware Brookshire Dental id13788 View details United States Healthcare / Pharma pending
    Ransomware Amco Metal Industrial Corporation id13782 View details United States Manufacturing / Engineering pending
    Ransomware New TSI Holdings, NYSC id13755 View details United States Public Sector pending
    Ransomware www.srmedicalcenter.org id13630 View details United States Healthcare / Pharma pending
    Ransomware Network Communications Group id13619 View details United Kingdom Telecommunications pending
    Ransomware ayurcan id13585 View details Canada Communication / Marketing pending
    Ransomware KMLG id13536 View details Pakistan Manufacturing / Engineering deleted
    Ransomware EHS Partnerships id13535 View details Canada Services pending
    Ransomware simple-solution-systems id13513 View details Singapore Services pending
    Ransomware Next step healthcar id13423 View details United States Healthcare / Pharma pending
    Ransomware ZSZAALEJI.cz id13408 View details Czechia Education pending
    Ransomware The Wacks Law Group id13279 View details United States Finance / Legal / Insurance pending
    Ransomware pomalca.com.pe id13278 View details Peru Communication / Marketing pending
    Ransomware YKS id13169 View details Türkiye Other pending
    Ransomware Ashtons Legal LLP id13099 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware prinsotel.com id13096 View details Spain Communication / Marketing pending
    Ransomware Wise Construction id13091 View details United States Construction / Real Estate pending
    Ransomware Synnovis id13071 View details United Kingdom Healthcare / Pharma pending
    Ransomware kinslerfamilydentistry id13064 View details United States Healthcare / Pharma pending
    Ransomware northcottage.com id13054 View details United States Communication / Marketing pending
    Ransomware St Vincent de Paul Catholic School id13050 View details United States Education pending
    Ransomware Next Step Healthcare id13038 View details United States Healthcare / Pharma pending
    Ransomware svmasonry.com id13020 View details United States Construction / Real Estate pending
    Ransomware EnviroApplications id13018 View details United States Finance / Legal / Insurance pending
    Ransomware Bock & Associates, LLP id13004 View details United States Finance / Legal / Insurance pending
    Ransomware hydefuel.com id12987 View details United States Energy pending
    Ransomware a-agroup id12949 View details United States Construction / Real Estate pending
    Ransomware Above All Store Fronts id12931 View details United States Retail / E-commerce pending
    Ransomware PFAM id12930 View details United States Communication / Marketing pending
    Ransomware Logimodal Operações Logísticas id12929 View details Brazil Other pending
    Ransomware Allied Toyota Lift id12928 View details United States Manufacturing / Engineering pending
    Ransomware Datanet id12732 View details United States Construction / Real Estate pending
    Ransomware Golden Acre id12671 View details Canada Retail / E-commerce pending
    Ransomware Shyang Shin Bao Ind. Co., Ltd. (hereinafter referred to as ''SSB'') id12599 View details Taiwan, Province of China Services pending
    Ransomware Consulting Radiologists id12569 View details United States Services — pending
    Ransomware FIAB SpA id12568 View details Italy Other pending
    Ransomware Municipalité La Guadeloupe id12527 View details France Public Sector — pending
    Ransomware McSweeney / Langevin id12503 View details United States Finance / Legal / Insurance pending
    Ransomware Edlong id12464 View details United States Communication / Marketing pending
    Ransomware Holstein Association USA id12393 View details United States NGOs / Associations — pending
    Ransomware Intuitae id12380 View details Luxembourg Communication / Marketing — pending
    Ransomware Tholen Building Technology Group id12379 View details Germany IT pending
    Ransomware williamsrdm.com id12378 View details United States Manufacturing / Engineering pending
    Ransomware inforius id12377 View details Belgium Telecommunications pending
    Ransomware The Weinstein Firm id12333 View details United States Other — pending
    Ransomware Dr Charles A Evans id12268 View details United States Healthcare / Pharma — pending
    Ransomware MCS id12255 View details United States Public Sector pending
    Ransomware Tohlen Building Technology Group id12254 View details Germany IT — pending
    Ransomware watergate id12241 View details Germany Hospitality / Food & Beverage / Tourism pending
    Ransomware Beloinlaw id12136 View details United States Finance / Legal / Insurance pending
    Ransomware jean-nouvel id12111 View details France Communication / Marketing pending
    Ransomware The law firm Dr. Fingerle Rechtsanwälte id12071 View details Germany Finance / Legal / Insurance — pending
    Ransomware etateam.be id11725 View details Belgium Communication / Marketing pending
    Ransomware Cembell Industries id11681 View details United States Manufacturing / Engineering — pending
    Ransomware maccarinelli.it id11558 View details Italy Construction / Real Estate — pending
    Ransomware easchangesystems id11534 View details Netherlands Manufacturing / Engineering pending
    Ransomware Madero id11531 View details Canada Other — pending
    Ransomware Wacks Law Group id11506 View details United States Finance / Legal / Insurance — pending