Ransomware Group intelligence

Qilin

Active

Track Qilin with 2209 published victims and 5 known leak locations in a single intelligence view.

Victims 2209 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 966 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2209 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Unknown kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 3 Onion service Unknown ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 4 Onion service Unknown b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Unknown ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2209)

    Search, filter and paginate the victim timeline for Qilin. Showing 2001–2100 of 2209.

    Type Target Discovered Country Business Category Intel Link
    Ransomware LaMear & Rapert, LLC - Accounting Firm id15542 View details United States Finance / Legal / Insurance
    Ransomware Alpha Care Medical Group id15541 View details United States Healthcare / Pharma
    Ransomware Privat Spitex id15540 View details Switzerland Communication / Marketing
    Ransomware ebrso id15167 View details United States Communication / Marketing
    Ransomware www.colonialbh.org id15159 View details United States Public Sector
    Ransomware AXIOM id15154 View details United Arab Emirates Services
    Ransomware The Law Offices of Jed Silverman id15130 View details United States Finance / Legal / Insurance
    Ransomware Imprimerie Peau id15125 View details France Communication / Marketing
    Ransomware DieTech North America id15122 View details United States IT
    Ransomware www.mltmua.com id15100 View details United States Communication / Marketing
    Ransomware DAIKIN THAILAND id15099 View details Thailand Communication / Marketing
    Ransomware Heritage Golf id15098 View details South Africa Communication / Marketing
    Ransomware Valu-Trac Investment Management id15097 View details United Kingdom Services
    Ransomware propak id15096 View details Thailand Communication / Marketing
    Ransomware Aiken Electric Cooperative id15095 View details United States Energy
    Ransomware Groupe Althays id15094 View details France IT
    Ransomware AIMS, Inc. Fuel Business Accounting Software, Jobber Software Wholesale Petroleum Acco id15093 View details United States IT
    Ransomware Freyberg Petroleum id15092 View details United States Energy
    Ransomware aziz oil id15091 View details United States Energy
    Ransomware PetroSouth id15090 View details Venezuela, Bolivarian Republic of Services
    Ransomware patria.hu id15089 View details Hungary Retail / E-commerce
    Ransomware McGaughey & Keaney CPAs id14586 View details United States Finance / Legal / Insurance
    Ransomware DPC DATA id14583 View details United States Construction / Real Estate
    Ransomware Forshey Prostok LLP id14561 View details United States Communication / Marketing
    Ransomware United Animal Health id14555 View details United States Healthcare / Pharma
    Ransomware performance-therapies id14545 View details United States Healthcare / Pharma
    Ransomware canstarrestorations.com id14524 View details Canada Construction / Real Estate
    Ransomware Keller Williams Realty Group id14520 View details United States Construction / Real Estate
    Ransomware McAbee Construction, Inc id14519 View details United States Construction / Real Estate
    Ransomware DETROIT PBS ( PUBLIC TV ) id14459 View details United States Public Sector
    Ransomware Luso Cuanzа id14455 View details Angola IT
    Ransomware Kravit, Hovel & Krawczyk SC id14430 View details United States Finance / Legal / Insurance
    Ransomware DIamond Contracting, LLC id14421 View details United States Construction / Real Estate
    Ransomware Detroit Public TV id14414 View details United States Public Sector
    Ransomware Canstar Restorations id14410 View details Canada Construction / Real Estate
    Ransomware Woodard , Hernandez , Roth & Day id14407 View details United States Finance / Legal / Insurance
    Ransomware KW Realty Group id14397 View details United States Services
    Ransomware Bertelkamp Automation id14358 View details United States Communication / Marketing
    Ransomware agricola id14355 View details Romania Agriculture / Food
    Ransomware EAGLE School id14297 View details United States Education
    Ransomware Kingsmill Resort id14270 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware kahle cpa id14218 View details United States Services
    Ransomware CAM Tyre Trade Systems & Solutions id14216 View details United Kingdom Services
    Ransomware atlanticice.com id14215 View details United States Communication / Marketing
    Ransomware Phoenix Air Conditioning & Heating id14214 View details United States Public Sector
    Ransomware Exitz Technologies id14213 View details India IT
    Ransomware Millsboro Animal Hospital id14205 View details United States Healthcare / Pharma
    Ransomware Arch Street Capital Advisors id14177 View details United States Construction / Real Estate
    Ransomware Turman id14149 View details United States Other
    Ransomware Risser Oil id14063 View details United States Energy
    Ransomware Stiller Aesthetics id14059 View details United States Healthcare / Pharma
    Ransomware JM Thompson id14042 View details United States Construction / Real Estate
    Ransomware codacinc.org id14030 View details United States Communication / Marketing
    Ransomware Mason City Recycling Center id14018 View details United States Public Sector
    Ransomware Brookshire Dental - Hospitals & Clinics id14001 View details United States Healthcare / Pharma
    Ransomware Penn Veterinary Supply INC id13985 View details United States Healthcare / Pharma
    Ransomware Meli (BCYF & Bethany) id13984 View details Australia Services
    Ransomware dt-technologies id13983 View details France IT
    Ransomware Prefeitura do Jaboatão dos Guararapes id13858 View details Brazil Communication / Marketing
    Ransomware on365.co.uk id13857 View details United Kingdom Communication / Marketing
    Ransomware Hiesmayr Haustechnik id13855 View details Austria IT
    Ransomware promises2kids.org id13853 View details United States Communication / Marketing
    Ransomware ccj.edu.lb id13852 View details Lebanon Education
    Ransomware Patterson Health Center id13847 View details United States Healthcare / Pharma
    Ransomware www.prinsotel.com id13846 View details Spain Communication / Marketing
    Ransomware Brookshire Dental id13788 View details United States Healthcare / Pharma
    Ransomware Amco Metal Industrial Corporation id13782 View details United States Manufacturing / Engineering
    Ransomware New TSI Holdings, NYSC id13755 View details United States Public Sector
    Ransomware www.srmedicalcenter.org id13630 View details United States Healthcare / Pharma
    Ransomware Network Communications Group id13619 View details United Kingdom Telecommunications
    Ransomware ayurcan id13585 View details Canada Communication / Marketing
    Ransomware KMLG id13536 View details Pakistan Manufacturing / Engineering
    Ransomware EHS Partnerships id13535 View details Canada Services
    Ransomware simple-solution-systems id13513 View details Singapore Services
    Ransomware Next step healthcar id13423 View details United States Healthcare / Pharma
    Ransomware ZSZAALEJI.cz id13408 View details Czechia Education
    Ransomware The Wacks Law Group id13279 View details United States Finance / Legal / Insurance
    Ransomware pomalca.com.pe id13278 View details Peru Communication / Marketing
    Ransomware YKS id13169 View details Türkiye Other
    Ransomware Ashtons Legal LLP id13099 View details United Kingdom Finance / Legal / Insurance
    Ransomware prinsotel.com id13096 View details Spain Communication / Marketing
    Ransomware Wise Construction id13091 View details United States Construction / Real Estate
    Ransomware Synnovis id13071 View details United Kingdom Healthcare / Pharma
    Ransomware kinslerfamilydentistry id13064 View details United States Healthcare / Pharma
    Ransomware northcottage.com id13054 View details United States Communication / Marketing
    Ransomware St Vincent de Paul Catholic School id13050 View details United States Education
    Ransomware Next Step Healthcare id13038 View details United States Healthcare / Pharma
    Ransomware svmasonry.com id13020 View details United States Construction / Real Estate
    Ransomware EnviroApplications id13018 View details United States Finance / Legal / Insurance
    Ransomware Bock & Associates, LLP id13004 View details United States Finance / Legal / Insurance
    Ransomware hydefuel.com id12987 View details United States Energy
    Ransomware a-agroup id12949 View details United States Construction / Real Estate
    Ransomware Above All Store Fronts id12931 View details United States Retail / E-commerce
    Ransomware PFAM id12930 View details United States Communication / Marketing
    Ransomware Logimodal Operações Logísticas id12929 View details Brazil Other
    Ransomware Allied Toyota Lift id12928 View details United States Manufacturing / Engineering
    Ransomware Datanet id12732 View details United States Construction / Real Estate
    Ransomware Golden Acre id12671 View details Canada Retail / E-commerce
    Ransomware Shyang Shin Bao Ind. Co., Ltd. (hereinafter referred to as ''SSB'') id12599 View details Taiwan, Province of China Services
    Ransomware Consulting Radiologists id12569 View details United States Services