Ransomware Group intelligence

Qilin

Active

Track Qilin with 2209 published victims and 5 known leak locations in a single intelligence view.

Victims 2209 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 966 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2209 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Unknown kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 3 Onion service Unknown ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 4 Onion service Unknown b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Unknown ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2209)

    Search, filter and paginate the victim timeline for Qilin. Showing 1–100 of 2209.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Hoc id31020 View details United Kingdom Manufacturing / Engineering
    Ransomware Hoc id31020 View details United Kingdom Manufacturing / Engineering
    Ransomware Gran valle negocios id31006 View details Argentina Retail / E-commerce
    Ransomware Gran valle negocios id31006 View details Argentina Retail / E-commerce
    Ransomware Groupe Fenwick id30987 View details France Retail / E-commerce
    Ransomware Groupe Fenwick id30987 View details France Retail / E-commerce
    Ransomware Savills France id30970 View details France Construction / Real Estate
    Ransomware Savills France id30970 View details France Construction / Real Estate
    Ransomware Wilbert's id30971 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Wilbert's id30971 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Contacto Garantido id30881 View details Mexico Retail / E-commerce
    Ransomware Contacto Garantido id30881 View details Mexico Retail / E-commerce
    Ransomware Universitatea de Vest „Vasile Goldiș” din Arad id30882 View details Romania NGOs / Associations
    Ransomware Universitatea de Vest „Vasile Goldiș” din Arad id30882 View details Romania NGOs / Associations
    Ransomware Jubilee Jobs id30843 View details Nigeria NGOs / Associations
    Ransomware Jubilee Jobs id30843 View details Nigeria NGOs / Associations
    Ransomware Plitvička Jezera Nacionalni Park id30844 View details Croatia Transportation / Travel / Logistics
    Ransomware Plitvička Jezera Nacionalni Park id30844 View details Croatia Transportation / Travel / Logistics
    Ransomware The Myers Y Cooper id30845 View details United States Manufacturing / Engineering
    Ransomware The Myers Y Cooper id30845 View details United States Manufacturing / Engineering
    Ransomware Guntert & Zimmerman id30841 View details Switzerland Manufacturing / Engineering
    Ransomware Guntert & Zimmerman id30841 View details Switzerland Manufacturing / Engineering
    Ransomware Principle Diagnostics Laboratory id30842 View details India Healthcare / Pharma
    Ransomware Principle Diagnostics Laboratory id30842 View details India Healthcare / Pharma
    Ransomware GURR Abdichtungstechnik GmbH id30839 View details Germany Manufacturing / Engineering
    Ransomware GURR Abdichtungstechnik GmbH id30839 View details Germany Manufacturing / Engineering
    Ransomware GOP id30833 View details United Kingdom Transportation / Travel / Logistics
    Ransomware GOP id30833 View details United Kingdom Transportation / Travel / Logistics
    Ransomware Stryker id30825 View details United States Manufacturing / Engineering
    Ransomware Stryker id30825 View details United States Manufacturing / Engineering
    Ransomware Ejército Argentino id30820 View details Argentina Public Sector
    Ransomware Ejército Argentino id30820 View details Argentina Public Sector
    Ransomware Kean University id30821 View details United States Education
    Ransomware Kean University id30821 View details United States Education
    Ransomware Highline Community College id30822 View details United States Education
    Ransomware Highline Community College id30822 View details United States Education
    Ransomware Machinerie P&W id30777 View details Canada Manufacturing / Engineering
    Ransomware Machinerie P&W id30777 View details Canada Manufacturing / Engineering
    Ransomware ABM Enviro id30778 View details Canada Services
    Ransomware ABM Enviro id30778 View details Canada Services
    Ransomware WellPerf id30771 View details United Kingdom Healthcare / Pharma
    Ransomware WellPerf id30771 View details United Kingdom Healthcare / Pharma
    Ransomware Corporate 360 Business Solutions id30766 View details Canada IT
    Ransomware Corporate 360 Business Solutions id30766 View details Canada IT
    Ransomware Assos Pharmaceuticals id30767 View details Türkiye Healthcare / Pharma
    Ransomware Assos Pharmaceuticals id30767 View details Türkiye Healthcare / Pharma
    Ransomware Cano Industrial id30768 View details Mexico Manufacturing / Engineering
    Ransomware Cano Industrial id30768 View details Mexico Manufacturing / Engineering
    Ransomware Triton Trading id30769 View details Peru Manufacturing / Engineering
    Ransomware Triton Trading id30769 View details Peru Manufacturing / Engineering
    Ransomware AppleOne Properties id30770 View details Philippines Manufacturing / Engineering
    Ransomware AppleOne Properties id30770 View details Philippines Manufacturing / Engineering
    Ransomware Sunway Berhad id30762 View details Malaysia Construction / Real Estate
    Ransomware Sunway Berhad id30762 View details Malaysia Construction / Real Estate
    Ransomware P & A Construction id30758 View details United States Construction / Real Estate
    Ransomware P & A Construction id30758 View details United States Construction / Real Estate
    Ransomware Primeline Logistics id30750 View details Ireland Transportation / Travel / Logistics
    Ransomware Primeline Logistics id30750 View details Ireland Transportation / Travel / Logistics
    Ransomware Recsa id30751 View details Costa Rica Manufacturing / Engineering
    Ransomware Recsa id30751 View details Costa Rica Manufacturing / Engineering
    Ransomware Salida Union School District id30752 View details United States Education
    Ransomware Salida Union School District id30752 View details United States Education
    Ransomware Cpcg id30754 View details Brazil Construction / Real Estate
    Ransomware Cpcg id30754 View details Brazil Construction / Real Estate
    Ransomware EFU Life Assurance id30755 View details Pakistan Healthcare / Pharma
    Ransomware EFU Life Assurance id30755 View details Pakistan Healthcare / Pharma
    Ransomware Infina Health id30756 View details United States Healthcare / Medicine
    Ransomware Infina Health id30756 View details United States Healthcare / Medicine
    Ransomware Evergreen Title id30738 View details United States Finance / Legal / Insurance
    Ransomware Evergreen Title id30738 View details United States Finance / Legal / Insurance
    Ransomware RehaVital Gesundheitsservice GmbH id30731 View details Germany Healthcare / Medicine
    Ransomware RehaVital Gesundheitsservice GmbH id30731 View details Germany Healthcare / Medicine
    Ransomware Postres Reina id30719 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware Postres Reina id30719 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware Bolt & Nut Manufacturing id30695 View details United Kingdom Manufacturing / Engineering
    Ransomware Bolt & Nut Manufacturing id30695 View details United Kingdom Manufacturing / Engineering
    Ransomware PP+K id30686 View details Brazil Education
    Ransomware PP+K id30686 View details Brazil Education
    Ransomware Eana id30687 View details Argentina Other
    Ransomware Eana id30687 View details Argentina Other
    Ransomware Synergy Products id30688 View details Türkiye Healthcare / Medicine
    Ransomware Synergy Products id30688 View details Türkiye Healthcare / Medicine
    Ransomware Don Tortaco Mexican Grill id30683 View details United States Retail / E-commerce
    Ransomware Don Tortaco Mexican Grill id30683 View details United States Retail / E-commerce
    Ransomware Associated Theatrical Contractors id30684 View details United States Construction / Real Estate
    Ransomware Associated Theatrical Contractors id30684 View details United States Construction / Real Estate
    Ransomware City Ambulance Service id30670 View details United States Healthcare / Medicine
    Ransomware City Ambulance Service id30670 View details United States Healthcare / Medicine
    Ransomware Famesa id30671 View details Peru Manufacturing / Engineering
    Ransomware Famesa id30671 View details Peru Manufacturing / Engineering
    Ransomware Heartland Catfish id30664 View details United States Agriculture / Food
    Ransomware Heartland Catfish id30664 View details United States Agriculture / Food
    Ransomware Salina Supply id30665 View details United States Retail / E-commerce
    Ransomware Salina Supply id30665 View details United States Retail / E-commerce
    Ransomware St Martha Catholic Church id30666 View details United States Healthcare / Medicine
    Ransomware St Martha Catholic Church id30666 View details United States Healthcare / Medicine
    Ransomware The Nueva School id30667 View details United States Education
    Ransomware The Nueva School id30667 View details United States Education
    Ransomware Sicc id30661 View details Italy Manufacturing / Engineering
    Ransomware Sicc id30661 View details Italy Manufacturing / Engineering