We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Qilin

Active

Track Qilin with 2672 published victims and 5 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 2672 Known published victims in this dataset
First discovered 2022-10-08 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 1159 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Qilin is tracked by Dark Eye as a ransomware group with 2672 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 440 16.5%
  • Pending 2222 83.2%
  • Deleted 10 0.4%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 3 Onion service Up checked 32m ago ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 5 Onion service Down checked 31m ago ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion
    Leak location 2 Onion service Down checked 32m ago kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
    Leak location 4 Onion service Down checked 32m ago b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
    Leak location 1 Onion service Down checked 32m ago ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion

    Top Activity Sectors (18)

    Victims (2672)

    Search, filter and paginate the victim timeline for Qilin. Showing 2501–2600 of 2672.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Bertelkamp Automation id14358 View details United States Communication / Marketing pending
    Ransomware agricola id14355 View details Romania Agriculture / Food pending
    Ransomware EAGLE School id14297 View details United States Education pending
    Ransomware Kingsmill Resort id14270 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware kahle cpa id14218 View details United States Services pending
    Ransomware CAM Tyre Trade Systems & Solutions id14216 View details United Kingdom Services pending
    Ransomware atlanticice.com id14215 View details United States Communication / Marketing pending
    Ransomware Phoenix Air Conditioning & Heating id14214 View details United States Public Sector pending
    Ransomware Exitz Technologies id14213 View details India IT pending
    Ransomware Millsboro Animal Hospital id14205 View details United States Healthcare / Pharma pending
    Ransomware Arch Street Capital Advisors id14177 View details United States Construction / Real Estate pending
    Ransomware Turman id14149 View details United States Other pending
    Ransomware Risser Oil id14063 View details United States Energy pending
    Ransomware Stiller Aesthetics id14059 View details United States Healthcare / Pharma pending
    Ransomware JM Thompson id14042 View details United States Construction / Real Estate leaked
    Ransomware codacinc.org id14030 View details United States Communication / Marketing pending
    Ransomware Mason City Recycling Center id14018 View details United States Public Sector pending
    Ransomware Brookshire Dental - Hospitals & Clinics id14001 View details United States Healthcare / Pharma pending
    Ransomware Penn Veterinary Supply INC id13985 View details United States Healthcare / Pharma pending
    Ransomware Meli (BCYF & Bethany) id13984 View details Australia Services pending
    Ransomware dt-technologies id13983 View details France IT pending
    Ransomware Prefeitura do Jaboatão dos Guararapes id13858 View details Brazil Communication / Marketing pending
    Ransomware on365.co.uk id13857 View details United Kingdom Communication / Marketing pending
    Ransomware Hiesmayr Haustechnik id13855 View details Austria IT pending
    Ransomware promises2kids.org id13853 View details United States Communication / Marketing pending
    Ransomware ccj.edu.lb id13852 View details Lebanon Education pending
    Ransomware Patterson Health Center id13847 View details United States Healthcare / Pharma pending
    Ransomware www.prinsotel.com id13846 View details Spain Communication / Marketing pending
    Ransomware Brookshire Dental id13788 View details United States Healthcare / Pharma pending
    Ransomware Amco Metal Industrial Corporation id13782 View details United States Manufacturing / Engineering pending
    Ransomware New TSI Holdings, NYSC id13755 View details United States Public Sector pending
    Ransomware www.srmedicalcenter.org id13630 View details United States Healthcare / Pharma pending
    Ransomware Network Communications Group id13619 View details United Kingdom Telecommunications pending
    Ransomware ayurcan id13585 View details Canada Communication / Marketing pending
    Ransomware KMLG id13536 View details Pakistan Manufacturing / Engineering deleted
    Ransomware EHS Partnerships id13535 View details Canada Services pending
    Ransomware simple-solution-systems id13513 View details Singapore Services pending
    Ransomware Next step healthcar id13423 View details United States Healthcare / Pharma pending
    Ransomware ZSZAALEJI.cz id13408 View details Czechia Education pending
    Ransomware The Wacks Law Group id13279 View details United States Finance / Legal / Insurance pending
    Ransomware pomalca.com.pe id13278 View details Peru Communication / Marketing pending
    Ransomware YKS id13169 View details Türkiye Other pending
    Ransomware Ashtons Legal LLP id13099 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware prinsotel.com id13096 View details Spain Communication / Marketing pending
    Ransomware Wise Construction id13091 View details United States Construction / Real Estate pending
    Ransomware Synnovis id13071 View details United Kingdom Healthcare / Pharma pending
    Ransomware kinslerfamilydentistry id13064 View details United States Healthcare / Pharma pending
    Ransomware northcottage.com id13054 View details United States Communication / Marketing pending
    Ransomware St Vincent de Paul Catholic School id13050 View details United States Education pending
    Ransomware Next Step Healthcare id13038 View details United States Healthcare / Pharma pending
    Ransomware svmasonry.com id13020 View details United States Construction / Real Estate pending
    Ransomware EnviroApplications id13018 View details United States Finance / Legal / Insurance pending
    Ransomware Bock & Associates, LLP id13004 View details United States Finance / Legal / Insurance pending
    Ransomware hydefuel.com id12987 View details United States Energy pending
    Ransomware a-agroup id12949 View details United States Construction / Real Estate pending
    Ransomware Above All Store Fronts id12931 View details United States Retail / E-commerce pending
    Ransomware PFAM id12930 View details United States Communication / Marketing pending
    Ransomware Logimodal Operações Logísticas id12929 View details Brazil Other pending
    Ransomware Allied Toyota Lift id12928 View details United States Manufacturing / Engineering pending
    Ransomware Datanet id12732 View details United States Construction / Real Estate pending
    Ransomware Golden Acre id12671 View details Canada Retail / E-commerce pending
    Ransomware Shyang Shin Bao Ind. Co., Ltd. (hereinafter referred to as ''SSB'') id12599 View details Taiwan, Province of China Services pending
    Ransomware Consulting Radiologists id12569 View details United States Services — pending
    Ransomware FIAB SpA id12568 View details Italy Other pending
    Ransomware Municipalité La Guadeloupe id12527 View details France Public Sector — pending
    Ransomware McSweeney / Langevin id12503 View details United States Finance / Legal / Insurance pending
    Ransomware Edlong id12464 View details United States Communication / Marketing pending
    Ransomware Holstein Association USA id12393 View details United States NGOs / Associations — pending
    Ransomware Intuitae id12380 View details Luxembourg Communication / Marketing — pending
    Ransomware Tholen Building Technology Group id12379 View details Germany IT pending
    Ransomware williamsrdm.com id12378 View details United States Manufacturing / Engineering pending
    Ransomware inforius id12377 View details Belgium Telecommunications pending
    Ransomware The Weinstein Firm id12333 View details United States Other — pending
    Ransomware Dr Charles A Evans id12268 View details United States Healthcare / Pharma — pending
    Ransomware MCS id12255 View details United States Public Sector pending
    Ransomware Tohlen Building Technology Group id12254 View details Germany IT — pending
    Ransomware watergate id12241 View details Germany Hospitality / Food & Beverage / Tourism pending
    Ransomware Beloinlaw id12136 View details United States Finance / Legal / Insurance pending
    Ransomware jean-nouvel id12111 View details France Communication / Marketing pending
    Ransomware The law firm Dr. Fingerle Rechtsanwälte id12071 View details Germany Finance / Legal / Insurance — pending
    Ransomware etateam.be id11725 View details Belgium Communication / Marketing pending
    Ransomware Cembell Industries id11681 View details United States Manufacturing / Engineering — pending
    Ransomware maccarinelli.it id11558 View details Italy Construction / Real Estate — pending
    Ransomware easchangesystems id11534 View details Netherlands Manufacturing / Engineering pending
    Ransomware Madero id11531 View details Canada Other — pending
    Ransomware Wacks Law Group id11506 View details United States Finance / Legal / Insurance — pending
    Ransomware GRUPOCREATIVO HERRERA id11481 View details Ecuador Other — pending
    Ransomware W.P.J. McCarthy and Company id11478 View details Canada Construction / Real Estate — pending
    Ransomware Roberson & Sons Insurance Services id11471 View details United States Finance / Legal / Insurance — pending
    Ransomware Summer Fresh id11419 View details United States Agriculture / Food — pending
    Ransomware SummerFresh id11377 View details Canada Agriculture / Food — pending
    Ransomware Big Issue Group id11364 View details United Kingdom Finance / Legal / Insurance — pending
    Ransomware Burnham Wood Charter Schools id11358 View details United States Education — pending
    Ransomware Casa Santiveri id11337 View details Spain Agriculture / Food — pending
    Ransomware ptsmi.co.id id11336 View details Indonesia Communication / Marketing — pending
    Ransomware Felda Global Ventures Holdings Berhad id11211 View details Malaysia Agriculture / Food — pending
    Ransomware en-act-architecture id11130 View details France Construction / Real Estate — pending
    Ransomware brightwires.com.sa id11115 View details Saudi Arabia Communication / Marketing — pending
    Ransomware iemsc.com id11101 View details United Arab Emirates Services — pending
    Ransomware hawita-gruppe id11100 View details Germany Communication / Marketing — pending