Ransomware Group intelligence

Qilin

Active

Track Qilin with 2209 published victims and 5 known leak locations in a single intelligence view.

Victims 2209 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 966 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2209 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Unknown kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 3 Onion service Unknown ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 4 Onion service Unknown b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Unknown ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2209)

    Search, filter and paginate the victim timeline for Qilin. Showing 201–300 of 2209.

    Type Target Discovered Country Business Category Intel Link
    Ransomware LabelDaddy id30282 View details United States Retail / E-commerce
    Ransomware LabelDaddy id30282 View details United States Retail / E-commerce
    Ransomware TQ Financial Services id30245 View details United States Finance / Legal / Insurance
    Ransomware TQ Financial Services id30245 View details United States Finance / Legal / Insurance
    Ransomware Md Lewis id30246 View details United States Finance / Legal / Insurance
    Ransomware Md Lewis id30246 View details United States Finance / Legal / Insurance
    Ransomware Goodwill Manasota id30247 View details United States NGOs / Associations
    Ransomware Goodwill Manasota id30247 View details United States NGOs / Associations
    Ransomware Sitmatic id30248 View details Germany IT
    Ransomware Sitmatic id30248 View details Germany IT
    Ransomware Sisint id30249 View details Portugal IT
    Ransomware Sisint id30249 View details Portugal IT
    Ransomware Pennant Hills Golf Club id30224 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware Pennant Hills Golf Club id30224 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware Dennis Waters Rental Properties id30151 View details United Kingdom Construction / Real Estate
    Ransomware Dennis Waters Rental Properties id30151 View details United Kingdom Construction / Real Estate
    Ransomware Mattatuck Industrial Scrap Metal id30152 View details United States Manufacturing / Engineering
    Ransomware Mattatuck Industrial Scrap Metal id30152 View details United States Manufacturing / Engineering
    Ransomware Laughlin Nunnally Hood & Crum id30153 View details United States Finance / Legal / Insurance
    Ransomware Laughlin Nunnally Hood & Crum id30153 View details United States Finance / Legal / Insurance
    Ransomware Rossum Integration id30154 View details Slovakia IT
    Ransomware Rossum Integration id30154 View details Slovakia IT
    Ransomware Dynamic Laser Solutions Ltd. id30155 View details United Kingdom Manufacturing / Engineering
    Ransomware Dynamic Laser Solutions Ltd. id30155 View details United Kingdom Manufacturing / Engineering
    Ransomware Dixie Beverage id30156 View details United States Retail / E-commerce
    Ransomware Dixie Beverage id30156 View details United States Retail / E-commerce
    Ransomware Chamco id30121 View details United States Other
    Ransomware Chamco id30121 View details United States Other
    Ransomware Hemmersbach GmbH & Co. KG id30122 View details Germany IT
    Ransomware Hemmersbach GmbH & Co. KG id30122 View details Germany IT
    Ransomware Kunert Fashion id30104 View details Germany Manufacturing / Engineering
    Ransomware Kunert Fashion id30104 View details Germany Manufacturing / Engineering
    Ransomware Musashino University id30101 View details Japan Education
    Ransomware Musashino University id30101 View details Japan Education
    Ransomware KALIACT ANCHETA et Associs id30103 View details France Finance / Legal / Insurance
    Ransomware KALIACT ANCHETA et Associs id30103 View details France Finance / Legal / Insurance
    Ransomware Metal Sur Famin id30098 View details Argentina Manufacturing / Engineering
    Ransomware Metal Sur Famin id30098 View details Argentina Manufacturing / Engineering
    Ransomware Lam Soon id30092 View details Thailand Manufacturing / Engineering
    Ransomware Lam Soon id30092 View details Thailand Manufacturing / Engineering
    Ransomware Bristol Place id30093 View details United Kingdom Construction / Real Estate
    Ransomware Bristol Place id30093 View details United Kingdom Construction / Real Estate
    Ransomware Gsma id30094 View details United Kingdom Construction / Real Estate
    Ransomware Gsma id30094 View details United Kingdom Construction / Real Estate
    Ransomware Axionlog id30081 View details Czechia Transportation / Travel / Logistics
    Ransomware Axionlog id30081 View details Czechia Transportation / Travel / Logistics
    Ransomware NASCO id30082 View details United States Education
    Ransomware NASCO id30082 View details United States Education
    Ransomware 1-800-dentist id30068 View details United States Healthcare / Medicine
    Ransomware 1-800-dentist id30068 View details United States Healthcare / Medicine
    Ransomware Transcore id30069 View details United States Transportation / Travel / Logistics
    Ransomware Transcore id30069 View details United States Transportation / Travel / Logistics
    Ransomware ISOPLUS id30017 View details Greece Manufacturing / Engineering
    Ransomware ISOPLUS id30017 View details Greece Manufacturing / Engineering
    Ransomware Cash Canada id30003 View details Canada Finance / Legal / Insurance
    Ransomware Cash Canada id30003 View details Canada Finance / Legal / Insurance
    Ransomware Lee International id29994 View details Singapore Finance / Legal / Insurance
    Ransomware Lee International id29994 View details Singapore Finance / Legal / Insurance
    Ransomware Lee International id29994 View details Korea, Republic of Finance / Legal / Insurance
    Ransomware Schumacher Homes id30091 View details United States Construction / Real Estate
    Ransomware Central Bank of Libya id30080 View details Libya Finance / Legal / Insurance
    Ransomware Taiwan Sintong Machinery Co., Ltd id30075 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Sivatel Bangkok id30076 View details Thailand Hospitality / Food & Beverage / Tourism
    Ransomware Tri-tec id30078 View details United States Manufacturing / Engineering
    Ransomware Florida Engineering Services id30079 View details United States Manufacturing / Engineering
    Ransomware Pacific Lamp & Supply id30057 View details United States Manufacturing / Engineering
    Ransomware Roth Industries id29997 View details Germany Manufacturing / Engineering
    Ransomware Sparkle Pools id29998 View details United States Construction / Real Estate
    Ransomware PJ Daly Contracting id30000 View details Ireland Construction / Real Estate
    Ransomware Commune d'Eyguires id30002 View details France NGOs / Associations
    Ransomware THL PROJECT MANAGEMENT SDN. BHD. id29990 View details Malaysia Construction / Real Estate
    Ransomware Homes By J Anthony id29991 View details United States Construction / Real Estate
    Ransomware ATCOM Outsourcing id29992 View details Chile Telecommunications
    Ransomware Skupina Don Don - GRUPO BIMBO id29975 View details Slovenia Retail / E-commerce
    Ransomware Makel Companies Group id29978 View details Türkiye Manufacturing / Engineering
    Ransomware Golfview Developmental Center id29943 View details United States NGOs / Associations
    Ransomware Misericórdia de Santo Tirso id29927 View details Portugal Education
    Ransomware Q Link Wireless id29928 View details United States Telecommunications
    Ransomware Cng Ty Cp T Vn Xd Tng Hp id29920 View details Viet Nam Other
    Ransomware MAVA Healthcare id29921 View details United States Healthcare / Medicine
    Ransomware Grupo Indi id29924 View details Mexico
    Ransomware Can Healthcare Group id29925 View details Türkiye
    Ransomware DISTINET MURCIA SL id29824 View details Spain IT
    Ransomware Maui Divers Jewelry id29784 View details United States Retail / E-commerce
    Ransomware Bitek System id29781 View details Korea, Republic of Manufacturing / Engineering
    Ransomware AltaVista Strategic Partners id29736 View details Mexico IT
    Ransomware Plaxen & Adler id29737 View details Germany Finance / Legal / Insurance
    Ransomware Miller & Zois id29739 View details United States Finance / Legal / Insurance
    Ransomware Iliff id29740 View details United States IT
    Ransomware Efficient Home id29741 View details United States Construction / Real Estate
    Ransomware Bekman Marder Hopper Malarkey & Perlin id29742 View details Moldova, Republic of Finance / Legal / Insurance
    Ransomware Dulany Leahy Curtis & Brophy id29743 View details United States Other
    Ransomware dbHMS id29744 View details Germany Healthcare / Medicine
    Ransomware Teserra Outdoors id29745 View details United States Retail / E-commerce
    Ransomware Wright Constable & Skeen id29746 View details United States Finance / Legal / Insurance
    Ransomware Milstein Siegel id29747 View details United States Other
    Ransomware JV Equipment id29748 View details United States Manufacturing / Engineering
    Ransomware SAMES id29749 View details United States Manufacturing / Engineering
    Ransomware C.C. Creations id29750 View details United States Retail / E-commerce
    Ransomware TagleRock Technologies id29751 View details IT