Ransomware Group intelligence

Qilin

Active

Track Qilin with 2575 published victims and 5 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 2575 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-09-15 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 1081 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Dark Eye as a ransomware group with 2575 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 124 72.1%
  • Pending 40 23.3%
  • Deleted 8 4.7%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 3 Onion service Up checked 3m ago ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Down checked 2m ago ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion
    Leak location 2 Onion service Down checked 3m ago kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 4 Onion service Down checked 3m ago b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 1 Onion service Down checked 3m ago ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion

    Top Activity Sectors (18)

    Victims (2575)

    Search, filter and paginate the victim timeline for Qilin. Showing 2101–2200 of 2575.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware bcps.k12.va.us id20324 View details United States Education
    Ransomware personalassistants.com id20323 View details United States Communication / Marketing
    Ransomware a1trusses.com id20322 View details Canada Construction / Real Estate
    Ransomware teamhorner.com id20321 View details United States Other
    Ransomware logan.edu id20320 View details United States Education
    Ransomware cpshawaii.net id20319 View details United States Other
    Ransomware ccllabel.com id20318 View details United States Communication / Marketing
    Ransomware tmcousa.com id20317 View details United States Energy
    Ransomware hallmarknameplate.com id20316 View details United States Manufacturing / Engineering
    Ransomware mhmlawgroup.com id20315 View details United States Finance / Legal / Insurance
    Ransomware innovasystems.com id20297 View details United States Communication / Marketing
    Ransomware Cape Robbin Inc id20284 View details United States Services
    Ransomware Lasercam id20283 View details Germany Communication / Marketing
    Ransomware www.nexus.edu.my id20275 View details Malaysia Communication / Marketing
    Ransomware Centralno grijanje Tuzla id20271 View details Bosnia and Herzegovina Communication / Marketing
    Ransomware elitavia.com id20212 View details Slovenia Services
    Ransomware Berko İlaç Ve Ki̇mya San Aş id20204 View details Türkiye Healthcare / Pharma
    Ransomware www.bestop.com id20196 View details United States Retail / E-commerce
    Ransomware radiologue.paris id20194 View details France Healthcare / Pharma
    Ransomware Cacspmec id20183 View details Ecuador Finance / Legal / Insurance
    Ransomware The Holiday:Adult Care Community & Retirement Homes id20180 View details United States Healthcare / Pharma
    Ransomware tennsco.com id20152 View details United States Manufacturing / Engineering
    Ransomware edgeanalytical.com id20136 View details United States Communication / Marketing
    Ransomware blainemn.gov id20103 View details United States Communication / Marketing
    Ransomware abilenetx.gov id20102 View details United States Construction / Real Estate
    Ransomware gmb.com id20101 View details United States Manufacturing / Engineering
    Ransomware chreynolds.com id20100 View details United States Communication / Marketing
    Ransomware cwcglobal.com id20099 View details United Kingdom Agriculture / Food
    Ransomware gestionnaireimmobilier.ca id20098 View details Canada Construction / Real Estate
    Ransomware compagnons-du-devoir.com id20097 View details France NGOs / Associations
    Ransomware aldersonlaw.com id20096 View details United Kingdom Finance / Legal / Insurance
    Ransomware scelltech.com id20095 View details France IT
    Ransomware Straits Construction id20082 View details Singapore Construction / Real Estate
    Ransomware MKA Accountants: Business Advisers, Moonee Ponds VIC id20025 View details Australia Services
    Ransomware ITinSell group id20024 View details France Communication / Marketing
    Ransomware www.cmic-cmo.com id20011 View details Japan Healthcare / Pharma
    Ransomware SHRADERLAW id19942 View details United States Finance / Legal / Insurance
    Ransomware www.hcsheriff.gov id19941 View details United States Public Sector
    Ransomware mdgny.com id19857 View details United States Construction / Real Estate
    Ransomware clinpath.com id19856 View details United States Communication / Marketing
    Ransomware gslelectric.com id19855 View details United States Manufacturing / Engineering
    Ransomware jbanksdesign.com id19854 View details United States Finance / Legal / Insurance
    Ransomware gates-cooper.com id19853 View details United States Communication / Marketing
    Ransomware NSS 長崎船舶装備株式会社 id19768 View details Japan Construction / Real Estate
    Ransomware HCI Informatique d'entreprise id19713 View details France Communication / Marketing
    Ransomware Megachem Singapore id19711 View details Singapore Manufacturing / Engineering
    Ransomware www.newseason.com id19670 View details United States Healthcare / Pharma
    Ransomware cobbcounty id19669 View details United States Public Sector
    Ransomware www.ancc.org id19663 View details United States Retail / E-commerce
    Ransomware MALAYSIA AIRPORTS HOLDINGS BERHAD Part 1 of data taken !!! id19657 View details Malaysia Transportation / Travel / Logistics
    Ransomware Matrix New World Engineering id19648 View details United States Manufacturing / Engineering
    Ransomware mossyoak.com id19642 View details United States Other
    Ransomware dlcid.com id19641 View details United States Healthcare / Pharma
    Ransomware bostonconveyorandautomation.com id19640 View details United States Public Sector
    Ransomware nuovadfl.it id19639 View details Italy Communication / Marketing
    Ransomware rfsd13.org id19638 View details Education
    Ransomware SoloVue id19628 View details Services
    Ransomware CCHC Healthcare id19603 View details United States Healthcare / Pharma
    Ransomware nccer.org id19602 View details United States Construction / Real Estate
    Ransomware Dermatologists of Birmingham id19601 View details United States Healthcare / Pharma
    Ransomware MALAYSIA AIRPORTS HOLDINGS BERHAD id19600 View details Malaysia Transportation / Travel / Logistics
    Ransomware www.latouchepediatrics.com id19599 View details United States Communication / Marketing
    Ransomware govcz id19598 View details Czechia Public Sector
    Ransomware Whitley Law Firm id19596 View details United States Finance / Legal / Insurance
    Ransomware RC Manubhai id19594 View details Fiji Finance / Legal / Insurance
    Ransomware www.southlandscs.com id19588 View details United States Education
    Ransomware liftsolutionsinc.net id19582 View details United States Services
    Ransomware Penderels Trust id19581 View details United Kingdom Communication / Marketing
    Ransomware www.unitedcaps.com id19308 View details Luxembourg Services
    Ransomware parrishleasing.com id19289 View details United States Services
    Ransomware Richmond СPA id19280 View details United States Services
    Ransomware Dominion Lending Centres id19275 View details Canada Communication / Marketing
    Ransomware The Michelson Organization id19269 View details United States Construction / Real Estate
    Ransomware farma id19242 View details Argentina Agriculture / Food
    Ransomware www.monaghan.eu id19241 View details Ireland Retail / E-commerce
    Ransomware 1sthealthinc.com id19233 View details United States Healthcare / Pharma
    Ransomware accesssmt.com id19231 View details United States Construction / Real Estate
    Ransomware yankeetrails.com id19228 View details United States Transportation / Travel / Logistics
    Ransomware universalwindow.com id19227 View details United States Energy
    Ransomware bertie.k12.nc.us id19226 View details United States Education
    Ransomware www.nelson.edu id19204 View details United States Education
    Ransomware govonisabbiatrici id19187 View details Italy Manufacturing / Engineering
    Ransomware a-1freeman id19180 View details United States Public Sector
    Ransomware www.clubcar.com id19176 View details United States Manufacturing / Engineering
    Ransomware NL Olson & Associates id19163 View details United States Finance / Legal / Insurance
    Ransomware CDI id19162 View details Canada Construction / Real Estate
    Ransomware FEELFOUR id19112 View details Singapore Retail / E-commerce
    Ransomware MS SUPPLY CHAIN SOLUTIONS (MALAYSIA) SDN. BHD id19106 View details Malaysia Transportation / Travel / Logistics
    Ransomware Mapaex id19105 View details India Communication / Marketing
    Ransomware sk.com id19077 View details Korea, Republic of Services
    Ransomware Algas Engineering Pte Ltd - Algas Engineering id19076 View details Singapore Energy
    Ransomware Dinaksa Pesaje id19069 View details Spain Telecommunications
    Ransomware Sasszemklinika id19068 View details Hungary Healthcare / Pharma
    Ransomware MHT Partners id19067 View details United States Finance / Legal / Insurance
    Ransomware SPEEDFAM id19066 View details Japan Manufacturing / Engineering
    Ransomware Blink Photo id19065 View details United Kingdom Communication / Marketing
    Ransomware North Platte Natural Resources District id19064 View details United States Communication / Marketing
    Ransomware Galvatech id19063 View details Australia IT
    Ransomware Helitek Company Ltd. id19062 View details Thailand Communication / Marketing
    Ransomware Bangkok Electronics Co., Ltd id19061 View details Thailand Manufacturing / Engineering