Ransomware Group intelligence

Qilin

Active

Track Qilin with 2209 published victims and 5 known leak locations in a single intelligence view.

Victims 2209 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 966 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Breach House as a ransomware group with 2209 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
    Leak location 2 Onion service Unknown kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 3 Onion service Unknown ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 4 Onion service Unknown b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Unknown ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (2209)

    Search, filter and paginate the victim timeline for Qilin. Showing 801–900 of 2209.

    Type Target Discovered Country Business Category Intel Link
    Ransomware SoCal ROC id26045 View details United States Other
    Ransomware MBC id26000 View details Korea, Republic of Other
    Ransomware Cooperativa de Hostelería de Navarra id25999 View details Spain Other
    Ransomware Trace id25998 View details France Other
    Ransomware Esperance Communications id25997 View details Australia Communication / Marketing
    Ransomware Littlefield Companies id25995 View details United States Other
    Ransomware Rich Sport Public id25994 View details Thailand Public Sector
    Ransomware Tulsa International Airport id25987 View details United States Transportation / Travel
    Ransomware Moontown id25914 View details United Kingdom Other
    Ransomware Keil Erdbau id25913 View details Austria Other
    Ransomware Philippine Savings Bank (Metrobank Group) id25895 View details Philippines Finance / Legal / Insurance
    Ransomware InfoCom id25894 View details Germany Other
    Ransomware Valbifrut id25893 View details Chile Other
    Ransomware Chu & Yang Dental id25892 View details United States Healthcare / Pharma
    Ransomware KRÜSS id25891 View details Germany Other
    Ransomware Service Broadcasting Group id25890 View details United States Services
    Ransomware NessCampbell id25889 View details United States Other
    Ransomware Sukhothai Thammathirat Open University id25841 View details Thailand Education
    Ransomware Mills Products id25812 View details United States Communication / Marketing
    Ransomware Centrotherm International id25811 View details Germany Services
    Ransomware OKIN GROUP id25764 View details Spain Services
    Ransomware Şemsioğlu Uşak Ev Tarhanası id25763 View details Türkiye Other
    Ransomware Shiffler Equipment Sales id25747 View details United States Retail / E-commerce
    Ransomware Herzing id25746 View details United States Other
    Ransomware HARTE-BAVENDAMM Rechtsanwlte PartG mbB id25745 View details Germany Other
    Ransomware Borg Argentina id25744 View details Argentina Other
    Ransomware D & D Building id25743 View details United States Construction / Real Estate
    Ransomware Milott Laboratories id25737 View details Thailand Other
    Ransomware YCC Parts Mfg id25726 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware EDF Group id25705 View details United States Services
    Ransomware SiNetCon id25704 View details United States Other
    Ransomware Farmacias Vilela id25703 View details Spain Agriculture / Food
    Ransomware Proleasing id25702 View details Argentina Communication / Marketing
    Ransomware Copetrol id25699 View details Paraguay Other
    Ransomware Mutest id25680 View details France Other
    Ransomware Centro de Desarrollo Emprendedor Ensenada id25679 View details Mexico Communication / Marketing
    Ransomware Kontena Nasional Berhad id25624 View details Malaysia Other
    Ransomware Altius Geotecnia y Obras Especiales id25616 View details Spain Other
    Ransomware Yumark Enterprises id25599 View details Hong Kong Communication / Marketing
    Ransomware Casadei id25594 View details Italy Other
    Ransomware Dreher Law Firm id25578 View details United States Finance / Legal / Insurance
    Ransomware Jampen Holzbau AG id25577 View details Switzerland Other
    Ransomware University Volkswagen Mazda id25576 View details United States Education
    Ransomware Vietnam Airlines id25575 View details Viet Nam Transportation / Travel / Logistics
    Ransomware Balneario id25574 View details Spain Other
    Ransomware Orthopaedic Specialists of Massachusetts id25569 View details United States Other
    Ransomware Cary Pediatric Center id25568 View details United States Other
    Ransomware Fluorsid Spa id25564 View details Italy Other
    Ransomware Central Roofing South Wales id25563 View details United Kingdom Other
    Ransomware Laboratorios Smasac id25562 View details Mexico Other
    Ransomware Ilumno id25561 View details United States Other
    Ransomware UGS id25560 View details Singapore Other
    Ransomware Colacem id25559 View details Italy Other
    Ransomware CFM Mozambique id25549 View details Mozambique Other
    Ransomware Moen id25541 View details United States Other
    Ransomware Aero-Coating id25540 View details Germany Other
    Ransomware Bergmanis Preyra id25539 View details Canada Finance / Legal / Insurance
    Ransomware PSTECHLTD id25538 View details United Kingdom IT
    Ransomware Krez & Flores id25537 View details United States Other
    Ransomware Texas State Utilities id25536 View details United States Energy
    Ransomware Neo Group id25535 View details Singapore Services
    Ransomware Lunsford Capital id25507 View details United States Other
    Ransomware Pre-Con Builders id25506 View details Canada Communication / Marketing
    Ransomware Radiant Remodeling id25505 View details United States Other
    Ransomware Gtech id25504 View details United States IT
    Ransomware Ernest Maier id25503 View details United States Other
    Ransomware Designers Mirror and Glass id25502 View details United States Other
    Ransomware Pathology Associates Of Saint Thomas id25501 View details United States Other
    Ransomware Resource Corporation of America id25461 View details United States Services
    Ransomware Young Wealth Management id25460 View details United States Services
    Ransomware Best Insurance Agency id25458 View details Finance / Legal / Insurance
    Ransomware Hayden Safe & Lock id25457 View details United States Other
    Ransomware G-WAY Microwave id25456 View details United States Other
    Ransomware Superior Water Conditioning id25455 View details United States Other
    Ransomware Pensam Residential id25420 View details United States Other
    Ransomware Sarl Alliance id25419 View details France Other
    Ransomware San Silvestre School id25418 View details Peru Education
    Ransomware Bouygues Energies & Services id25404 View details France Services
    Ransomware TriVector Services id25383 View details United States Services
    Ransomware Gaviota id25382 View details Spain Other
    Ransomware STESAD id25381 View details Germany Other
    Ransomware Softlab SpA id25380 View details Italy Other
    Ransomware Spring Grove Area School District id25379 View details United States Education
    Ransomware Retrofit Service id25378 View details United States Other
    Ransomware Anteriad id25372 View details United States Other
    Ransomware PTS Goldkist Industries Sdn Bhd id25368 View details Malaysia Other
    Ransomware The Cressi id25367 View details Italy Other
    Ransomware Telstar-Hommel id25366 View details Korea, Republic of Other
    Ransomware Evergreen Printing id25362 View details United States Communication / Marketing
    Ransomware Sortimage id25361 View details France Other
    Ransomware Commercial Paving id25360 View details Canada Other
    Ransomware Berkmann Wine Cellars id25347 View details United Kingdom Other
    Ransomware USArt id25341 View details United States Other
    Ransomware Secorp Industries id25339 View details United States Services
    Ransomware Medical Asset Management id25338 View details United States Healthcare / Pharma
    Ransomware Health Bridge Chiropractic id25337 View details United States Healthcare / Pharma
    Ransomware Sönmezler Metal id25283 View details Türkiye Manufacturing / Engineering
    Ransomware Cal Spas, Inc. id25282 View details United States Services
    Ransomware Tommotek id25281 View details Finland Other
    Ransomware Ellison Educational Equipment id25262 View details United States Education