We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Qilin

Active

Track Qilin with 2672 published victims and 5 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 2672 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 1159 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Dark Eye as a ransomware group with 2672 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 440 16.5%
  • Pending 2222 83.2%
  • Deleted 10 0.4%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 3 Onion service Up checked 32m ago ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Down checked 31m ago ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion
    Leak location 2 Onion service Down checked 32m ago kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 4 Onion service Down checked 32m ago b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 1 Onion service Down checked 32m ago ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion

    Top Activity Sectors (18)

    Victims (2672)

    Search, filter and paginate the victim timeline for Qilin. Showing 2301–2400 of 2672.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware The Komec id19031 View details Belgium Manufacturing / Engineering pending
    Ransomware Spring Creek Golf & Country Club id19030 View details United States Communication / Marketing pending
    Ransomware JKC Australia LNG id19029 View details Australia Finance / Legal / Insurance pending
    Ransomware American Air Conditioning & Heating id19028 View details United States Communication / Marketing pending
    Ransomware Dhoot Transmission id19027 View details India Manufacturing / Engineering pending
    Ransomware Privat-Spitex Schweiz GmbH id19026 View details Switzerland Communication / Marketing pending
    Ransomware Baucenter.it id19017 View details Italy Communication / Marketing pending
    Ransomware sunbayhotel.com id19016 View details Barbados Hospitality / Food & Beverage / Tourism pending
    Ransomware Dalincoln id19015 View details United States Construction / Real Estate pending
    Ransomware Flo Components id19014 View details Canada Manufacturing / Engineering pending
    Ransomware St Edmund's College id19013 View details United Kingdom Education pending
    Ransomware Hewsco.com id19012 View details United States Healthcare / Pharma pending
    Ransomware Wertex Group id19011 View details Poland Communication / Marketing pending
    Ransomware Optimax Technology id18983 View details Taiwan, Province of China IT pending
    Ransomware Sinari's software POC id18961 View details France IT pending
    Ransomware amourgis.com id18960 View details United States Finance / Legal / Insurance pending
    Ransomware yuagam id18955 View details Türkiye Healthcare / Pharma pending
    Ransomware raymurray.com id18950 View details United States Energy pending
    Ransomware dgr.at id18949 View details Austria Construction / Real Estate pending
    Ransomware yumaspazio.com id18948 View details Spain Manufacturing / Engineering pending
    Ransomware Doumen id18927 View details China Other pending
    Ransomware caliendoarchitects.com id18907 View details United States Other pending
    Ransomware Groupe Sinari id18871 View details Niger IT pending
    Ransomware Bunger Steel id18859 View details United States Manufacturing / Engineering pending
    Ransomware TEPAS id18836 View details Türkiye Communication / Marketing pending
    Ransomware hardmanjohnston.com id18794 View details United States Communication / Marketing pending
    Ransomware charlesjones.ca id18793 View details Canada Agriculture / Food pending
    Ransomware blue-hive.com id18792 View details United States Communication / Marketing pending
    Ransomware derianhouse.co.uk id18791 View details United Kingdom Communication / Marketing pending
    Ransomware bedfordma.gov id18790 View details United States Public Sector pending
    Ransomware frazerllp.com id18789 View details United States Other pending
    Ransomware mmmbs.net id18788 View details United States Healthcare / Pharma pending
    Ransomware agakam id18757 View details France Services pending
    Ransomware acm id18754 View details Singapore Services pending
    Ransomware wieso-cert id18753 View details Germany Healthcare / Pharma pending
    Ransomware Wildeck Inc id18749 View details United States Services pending
    Ransomware Ebassi.com (E.B. Archbald and Associates) id18737 View details United Kingdom IT pending
    Ransomware gettys.com id18705 View details United States Healthcare / Pharma pending
    Ransomware Primary Flow Signal: Flow Meters | Flow Measurement id18704 View details United States Communication / Marketing pending
    Ransomware Wheels and Deals id18665 View details United States Manufacturing / Engineering pending
    Ransomware Groupe des Industries Métallurgiques id18631 View details France Manufacturing / Engineering pending
    Ransomware Subsurfco LLC id18572 View details United States Manufacturing / Engineering pending
    Ransomware Luff Industries id18536 View details Canada Manufacturing / Engineering pending
    Ransomware Los Madroños Hospital id18522 View details Spain Healthcare / Pharma pending
    Ransomware PTS Group id18497 View details Germany Services pending
    Ransomware Cleveland Municipal Court id18493 View details United States Public Sector pending
    Ransomware Lepant Law Office id18475 View details Spain Finance / Legal / Insurance pending
    Ransomware Worldlawn Power Equipment id18474 View details United States Finance / Legal / Insurance pending
    Ransomware Diode Technologies id18473 View details United States IT pending
    Ransomware SMC Corporation id18462 View details Japan Manufacturing / Engineering pending
    Ransomware Ricardo Rodriguez id18430 View details Chile Communication / Marketing pending
    Ransomware World Wide Fittings id18401 View details United States Manufacturing / Engineering pending
    Ransomware Yushin America, Inc id18372 View details United States Manufacturing / Engineering pending
    Ransomware CAHOKIA CUSD 187 SCHOOL DISTRICT id18363 View details United States Education pending
    Ransomware HOST Software Entwicklung und Consulting GmbH id18353 View details Germany IT pending
    Ransomware Gaines County, Texas id18335 View details United States Public Sector pending
    Ransomware Suder&Suder id18333 View details Poland Manufacturing / Engineering pending
    Ransomware Dacas Argentina id18295 View details Argentina Communication / Marketing pending
    Ransomware prelco.ca id18278 View details Canada Communication / Marketing pending
    Ransomware KH OneStop id18277 View details Denmark Transportation / Travel / Logistics pending
    Ransomware www.cdg.us id18243 View details United States Communication / Marketing pending
    Ransomware Connekted, Inc. id18219 View details United States Services pending
    Ransomware Ministry of Foreign Affairs of Ukraine id18216 View details Ukraine Public Sector pending
    Ransomware Chicago Doorways, LLC id18177 View details United States Services pending
    Ransomware PFS Grupo - Plan de igualdad, Sostenibilidad id18169 View details Spain Communication / Marketing pending
    Ransomware rockhillwc.com id18158 View details United States Communication / Marketing pending
    Ransomware bpmmicro.com id18157 View details United States Communication / Marketing pending
    Ransomware peruzzi.com id18156 View details Peru Communication / Marketing pending
    Ransomware Utsunomiya Central Clinic id18135 View details Japan Healthcare / Pharma pending
    Ransomware Ministry of Health of Palau id18095 View details Palau Healthcare / Pharma pending
    Ransomware ctpomd id18091 View details United States Other pending
    Ransomware Houston Symphony id18090 View details United States Other pending
    Ransomware Lee Enterprises id18085 View details United States Communication / Marketing pending
    Ransomware Soco systems id17838 View details Denmark Telecommunications pending
    Ransomware Sound Ideas id17817 View details Canada Healthcare / Pharma pending
    Ransomware Surface 678 id17815 View details United States Construction / Real Estate pending
    Ransomware Metro Supply Chain Group. id17744 View details Canada Transportation / Travel / Logistics pending
    Ransomware l.warsemann.fr id17687 View details France Other pending
    Ransomware Crossroads Trading Company, Inc id17683 View details United States Retail / E-commerce pending
    Ransomware palauhealth id17681 View details Palau Healthcare / Pharma pending
    Ransomware Andover Family Medicine id17674 View details United States Healthcare / Pharma pending
    Ransomware Access2Jobs id17663 View details United States Communication / Marketing pending
    Ransomware DBK id17634 View details Germany Finance / Legal / Insurance pending
    Ransomware traffic-advertising-llc id17632 View details United States Communication / Marketing pending
    Ransomware dr-elizabeth-bjornson id17631 View details United States Healthcare / Pharma pending
    Ransomware lake-washington-vascular id17629 View details United States Other pending
    Ransomware Bulverde Glass, Inc. id17577 View details United States Retail / E-commerce pending
    Ransomware F.TECH R&D NORTH AMERICA INC. id17527 View details United States IT pending
    Ransomware Bethany Lutheran Church id17525 View details United States Education pending
    Ransomware vadatech.com id17509 View details United States IT pending
    Ransomware Quality Home Health Care id17490 View details United States Healthcare / Pharma pending
    Ransomware TJKM id17472 View details United States Transportation / Travel / Logistics pending
    Ransomware Erie Management Group, LLC id17468 View details United States Services pending
    Ransomware tomsmithindustries.com id17464 View details United States Communication / Marketing pending
    Ransomware Spectrum Solutions id17276 View details — Services pending
    Ransomware nldappraisals.com id17258 View details Canada Communication / Marketing pending
    Ransomware renmarkfinancial.com id17257 View details Canada Finance / Legal / Insurance pending
    Ransomware HARADA id17247 View details Japan Manufacturing / Engineering pending
    Ransomware McCORMICK TAYLOR id17241 View details United States Communication / Marketing pending
    Ransomware rablighting.com id17232 View details United States Energy pending