Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2209 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2209 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2209)
Search, filter and paginate the victim timeline for Qilin. Showing 701–800 of 2209.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Rocky Mountain Care id26769 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Spire Payments id26767 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | GENERON id26766 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Rivages Du Monde id26765 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | TWU Local 100 id26763 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Plan-IT Office Solutions id26762 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | FAMILY EYECARE LLC id26761 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Cumberland International Trucks id26725 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | AllChem Industries id26724 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | North Woodlands Medical Centre id26723 View details | Canada | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Okanogan County Vets id26722 View details | United States | Public Sector | ||
|
No additional victim description available. |
|||||
| Ransomware | Tactis id26721 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Maintenance & Project Engineering id26720 View details | Australia | Manufacturing / Engineering | ||
|
No additional victim description available. |
|||||
| Ransomware | Complete Thermal Svc id26719 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | CYMOT id26718 View details | Namibia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | US Trading id26717 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Bluefish Dental & Orthodontics id26705 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Grupo Tomza id26704 View details | Mexico | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | WTSmedia id26703 View details | United States | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Esperance Metaland id26702 View details | Australia | Manufacturing / Engineering | ||
|
No additional victim description available. |
|||||
| Ransomware | LaBaguette id26698 View details | Kuwait | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Madison Services, Inc. id26695 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | ABAR S.p.A. id26687 View details | Italy | Hospitality / Food & Beverage / Tourism | ||
|
No additional victim description available. |
|||||
| Ransomware | The Corradino Group id26682 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Telecare id26666 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Kroll International id26665 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Kensington HPP id26660 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Willow Construction id26655 View details | United States | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | Graneles de Chile id26654 View details | Chile | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | University of Mannheim id26651 View details | Germany | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | O.Berk id26647 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Diversified Supply Inc. id26634 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Midwest Wheel id26630 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Saiful Bouquet id26629 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Brm id26617 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Castle Group id26613 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Casartigiani id26597 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | JC Resorts id26507 View details | United States | Hospitality / Food & Beverage / Tourism | ||
|
No additional victim description available. |
|||||
| Ransomware | Carrera Casting id26486 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Anchor Computer Systems id26461 View details | United Kingdom | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Derbez id26460 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Campbell Rappold & Yurasits id26459 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Conectados Chile S.A. id26458 View details | Chile | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sakata Seed America id26457 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Segue Manufacturing Services id26456 View details | United States | Manufacturing / Engineering | ||
|
No additional victim description available. |
|||||
| Ransomware | Ducasse Comercial Ltda id26455 View details | Chile | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | On-Point Defense Technologies id26438 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Tower Insurance Services id26433 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Topkin & Partlow id26432 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Andringa Law id26423 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Cox & Sanchez id26422 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Lindenhurst Fire Department id26421 View details | United States | Public Sector | ||
|
No additional victim description available. |
|||||
| Ransomware | Mississippi Market id26420 View details | United States | Retail / E-commerce | ||
|
No additional victim description available. |
|||||
| Ransomware | ZeroEnergy Design id26419 View details | United States | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | PowerON Services id26418 View details | United States | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | Castles Technology UK & Ireland id26417 View details | United Kingdom | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Mt Barker Co-Operative id26416 View details | Australia | Hospitality / Food & Beverage / Tourism | ||
|
No additional victim description available. |
|||||
| Ransomware | C4 (Carroll County Cannabis Co. id26394 View details | United States | Public Sector | ||
|
No additional victim description available. |
|||||
| Ransomware | Anabuki Kosan id26391 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Tech Environmental id26384 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | uniquegas id26383 View details | Singapore | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | Augusta Housing Authority id26382 View details | United States | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | iQ NetSolutions id26381 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Body By Fisher id26378 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Gradient Wind Engineering id26377 View details | Canada | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | AB Data id26371 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Voyages Robin id26369 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | granmanor.org id26363 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | zeroenergy.com id26362 View details | United States | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | poweron.com id26361 View details | United States | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | castlestechemea.com id26360 View details | Germany | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | abdata.com id26359 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | voyages-robin.com id26358 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Municipio de Chihuahua id26357 View details | Mexico | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | PARIS & MARSEILLE id26278 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | AMR PEMCO id26269 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Parente Fireworks id26259 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | La Fabrica id26236 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | University of Applied Sciences,Worms id26221 View details | Germany | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Conpet S.A. (COTE.RO) id26220 View details | Romania | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Kopas Cosmetics id26210 View details | Türkiye | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | MB Distribution id26107 View details | Romania | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | RENAFAN id26106 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Chèvre & Rutsch & Herren Notariatsbüro id26105 View details | Switzerland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | ChainPower Technology id26104 View details | Taiwan, Province of China | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | JOSE COMBALIA SA id26103 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | RC Collecting id26101 View details | Argentina | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Jingchang Enterprise Co., Ltd id26093 View details | China | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Medasa id26090 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Medinah School District 11 id26081 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Muebles Dico id26080 View details | Mexico | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Workers Health & Safety Centre id26074 View details | Canada | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Range Cooperatives id26073 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | The Hechtman Group id26072 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | KOUEI id26071 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Exterior Worlds id26068 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Jcm Agricola id26063 View details | Spain | Agriculture / Food | ||
|
No additional victim description available. |
|||||
| Ransomware | INGUS id26062 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sprokkit id26061 View details | United States | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Stephenson Ziegenhorn & Bernard id26060 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||