Ransomware Group intelligence

Qilin

Active

Track Qilin with 2209 published victims and 5 known leak locations in a single intelligence view.

Victims 2209 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 966 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2209 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Unknown kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 3 Onion service Unknown ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 4 Onion service Unknown b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Unknown ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2209)

    Search, filter and paginate the victim timeline for Qilin. Showing 101–200 of 2209.

    Type Target Discovered Country Business Category Intel Link
    Ransomware KLD Labs id30662 View details United States IT
    Ransomware KLD Labs id30662 View details United States IT
    Ransomware Armara id30663 View details France Retail / E-commerce
    Ransomware Armara id30663 View details France Retail / E-commerce
    Ransomware AK Preparedness id30659 View details United States Retail / E-commerce
    Ransomware AK Preparedness id30659 View details United States Retail / E-commerce
    Ransomware Powder River Heating & Air Conditioning id30649 View details United States Construction / Real Estate
    Ransomware Powder River Heating & Air Conditioning id30649 View details United States Construction / Real Estate
    Ransomware Droguería Martorani id30650 View details Argentina Retail / E-commerce
    Ransomware Droguería Martorani id30650 View details Argentina Retail / E-commerce
    Ransomware Cafar id30645 View details Argentina NGOs / Associations
    Ransomware Cafar id30645 View details Argentina NGOs / Associations
    Ransomware Acosol id30642 View details Spain Energy
    Ransomware Acosol id30642 View details Spain Energy
    Ransomware International Delights id30585 View details United States Retail / E-commerce
    Ransomware International Delights id30585 View details United States Retail / E-commerce
    Ransomware Feliubadaló id30571 View details Spain Other
    Ransomware Feliubadaló id30571 View details Spain Other
    Ransomware Levin Furniture id30570 View details United States Retail / E-commerce
    Ransomware Levin Furniture id30570 View details United States Retail / E-commerce
    Ransomware THL id30556 View details Finland Finance / Legal / Insurance
    Ransomware THL id30556 View details Finland Finance / Legal / Insurance
    Ransomware Sedemi id30538 View details Mexico IT
    Ransomware Sedemi id30538 View details Mexico IT
    Ransomware Counts & Dobyns id30532 View details United States Finance / Legal / Insurance
    Ransomware Counts & Dobyns id30532 View details United States Finance / Legal / Insurance
    Ransomware Centro Científico e Cultural de Macau id30533 View details Portugal Public Sector
    Ransomware Centro Científico e Cultural de Macau id30533 View details Portugal Public Sector
    Ransomware Jakub A.S. id30534 View details Czechia IT
    Ransomware Jakub A.S. id30534 View details Czechia IT
    Ransomware Cemoi id30535 View details France Agriculture / Food
    Ransomware Cemoi id30535 View details France Agriculture / Food
    Ransomware Busscar de Colombia id30536 View details Colombia Manufacturing / Engineering
    Ransomware Busscar de Colombia id30536 View details Colombia Manufacturing / Engineering
    Ransomware Hillebrand Home Health id30527 View details United States Healthcare / Medicine
    Ransomware Hillebrand Home Health id30527 View details United States Healthcare / Medicine
    Ransomware URH Hoteliers id30528 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware URH Hoteliers id30528 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware TitanTV, Inc. id30526 View details United States Other
    Ransomware TitanTV, Inc. id30526 View details United States Other
    Ransomware Century Equities id30495 View details United States Finance / Legal / Insurance
    Ransomware Century Equities id30495 View details United States Finance / Legal / Insurance
    Ransomware Retelit SpA PIVA id30496 View details Italy Telecommunications
    Ransomware Retelit SpA PIVA id30496 View details Italy Telecommunications
    Ransomware Carolina Agri-Power id30497 View details United States Construction / Real Estate
    Ransomware Carolina Agri-Power id30497 View details United States Construction / Real Estate
    Ransomware Allied Plumbing & Heating id30498 View details NH Energy
    Ransomware Allied Plumbing & Heating id30498 View details NH Energy
    Ransomware Eurodefi id30463 View details France Finance / Legal / Insurance
    Ransomware Eurodefi id30463 View details Morocco Finance / Legal / Insurance
    Ransomware Hilo id30418 View details Colombia IT
    Ransomware Hilo id30418 View details Colombia IT
    Ransomware Promotora Zacapu id30419 View details Mexico Transportation / Travel / Logistics
    Ransomware Promotora Zacapu id30419 View details Mexico Transportation / Travel / Logistics
    Ransomware Navana Real Estate id30420 View details United Arab Emirates Construction / Real Estate
    Ransomware Navana Real Estate id30420 View details United Arab Emirates Construction / Real Estate
    Ransomware SPACElogic id30412 View details Singapore Construction / Real Estate
    Ransomware SPACElogic id30412 View details Singapore Construction / Real Estate
    Ransomware Global Strategic Business Process Solutions id30413 View details United States Finance / Legal / Insurance
    Ransomware Global Strategic Business Process Solutions id30413 View details United States Finance / Legal / Insurance
    Ransomware CRZ Construcciones id30414 View details Argentina Construction / Real Estate
    Ransomware CRZ Construcciones id30414 View details Argentina Construction / Real Estate
    Ransomware Red Planet Hotels id30415 View details Philippines Hospitality / Food & Beverage / Tourism
    Ransomware Red Planet Hotels id30415 View details Philippines Hospitality / Food & Beverage / Tourism
    Ransomware Inter Power Engineering id30378 View details United Arab Emirates Manufacturing / Engineering
    Ransomware Inter Power Engineering id30378 View details United Arab Emirates Manufacturing / Engineering
    Ransomware Sintax id30372 View details Belgium IT
    Ransomware Sintax id30372 View details Belgium IT
    Ransomware Sun Dolphin Boats id30373 View details United States Manufacturing / Engineering
    Ransomware Sun Dolphin Boats id30373 View details United States Manufacturing / Engineering
    Ransomware Bronken's Dist id30374 View details Other
    Ransomware Bronken's Dist id30374 View details Other
    Ransomware Alan F Burke id30375 View details United States Finance / Legal / Insurance
    Ransomware Alan F Burke id30375 View details United States Finance / Legal / Insurance
    Ransomware Hum & Jacoby id30369 View details United States Finance / Legal / Insurance
    Ransomware Hum & Jacoby id30369 View details United States Finance / Legal / Insurance
    Ransomware Peligro Sports id30362 View details United States Retail / E-commerce
    Ransomware Peligro Sports id30362 View details United States Retail / E-commerce
    Ransomware S.J. Louis id30361 View details Brazil Construction / Real Estate
    Ransomware S.J. Louis id30361 View details Brazil Construction / Real Estate
    Ransomware Lechner Massivhaus GmbH id30346 View details Austria Construction / Real Estate
    Ransomware Lechner Massivhaus GmbH id30346 View details Austria Construction / Real Estate
    Ransomware COP® Vertriebs-GmbH Zentrale id30349 View details Germany Manufacturing / Engineering
    Ransomware COP® Vertriebs-GmbH Zentrale id30349 View details Germany Manufacturing / Engineering
    Ransomware Next Clinics id30324 View details Czechia Healthcare / Medicine
    Ransomware Next Clinics id30324 View details Czechia Healthcare / Medicine
    Ransomware Accelirate id30321 View details United States IT
    Ransomware Accelirate id30321 View details United States IT
    Ransomware Keystone Homes id30291 View details United States IT
    Ransomware Keystone Homes id30291 View details United States IT
    Ransomware Precision Steel Services id30292 View details Manufacturing / Engineering
    Ransomware Precision Steel Services id30292 View details Manufacturing / Engineering
    Ransomware Answer Precision Tool id30293 View details United States IT
    Ransomware Answer Precision Tool id30293 View details United States IT
    Ransomware Wood Ellis & Wood CPA id30289 View details United States Finance / Legal / Insurance
    Ransomware Wood Ellis & Wood CPA id30289 View details United States Finance / Legal / Insurance
    Ransomware Max Fordham id30284 View details United Kingdom Construction / Real Estate
    Ransomware Max Fordham id30284 View details United Kingdom Construction / Real Estate
    Ransomware Grupo Inteca id30285 View details Mexico IT
    Ransomware Grupo Inteca id30285 View details Mexico IT