qilin
First seen October 8, 2022Active2,262 claimed victims
The claims below are reproduced as posted by qilin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Bauman Law Group | September 5, 2026 | ransomlook | — |
| Philippine Ports Authority | September 5, 2026 | ransomlook | — |
| The Big Table | September 5, 2026 | ransomlook | — |
| Colonial Hyundai | September 5, 2026 | ransomlook | — |
| Nolan Consulting Group | September 5, 2026 | ransomlook | — |
| G&S Technologies | September 5, 2026 | ransomlook | — |
| Jouvet SAS | September 5, 2026 | ransomlook | — |
| AP CAPITAL PARTNERS LIMITED | September 4, 2026 | ransomlook | — |
| Commission de la construction du Quebec (CCQ) | September 4, 2026 | ransomlook | — |
| Complete Packaging Solutions | September 3, 2026 | ransomlook | — |
| Tanner | September 2, 2026 | ransomlook | — |
| Uak University | September 2, 2026 | ransomlook | — |
| Grayson Rural Electric Cooperative | September 2, 2026 | ransomlook | — |
| Commission de la construction du Quebec | September 1, 2026 | ransomlook | — |
| Inmac | August 31, 2026 | ransomlook | — |
| Allied Recycling | August 31, 2026 | ransomlook | — |
| AFSARD | August 30, 2026 | ransomlook | — |
| Black Cat Engineering Construction Wll | August 30, 2026 | ransomlook | — |
| Absolute Consultancy Services | August 30, 2026 | ransomlook | — |
| Crystalpharmatech | August 30, 2026 | ransomlook | — |
| Bandit Industries | August 29, 2026 | ransomlook | — |
| LAPoco Architects | August 29, 2026 | ransomlook | — |
| Neumaticos Corral S.A. | August 29, 2026 | ransomlook | — |
| CareClinics | August 29, 2026 | ransomlook | — |
| BLISS 1041 | August 29, 2026 | ransomlook | — |
| La Maison Des Travaux | August 29, 2026 | ransomlook | — |
| The Frame Group | August 29, 2026 | ransomlook | — |
| AUM Construction | August 29, 2026 | ransomlook | — |
| Alter Consultores Legales | August 28, 2026 | ransomlook | — |
| Newton County School System | August 28, 2026 | ransomlook | — |
| Whitehouse | August 28, 2026 | ransomlook | — |
| Infinnium | August 28, 2026 | ransomlook | — |
| Cosmocolor SA de CV | August 28, 2026 | ransomlook | — |
| Tramigo | August 28, 2026 | ransomlook | — |
| DigiGround | August 28, 2026 | ransomlook | — |
| Displaydata | August 27, 2026 | ransomlook | — |
| DAB Investments | August 27, 2026 | ransomlook | — |
| Open Sports | August 27, 2026 | ransomlook | — |
| LGG Advisors | August 27, 2026 | ransomlook | — |
| Providence Investments | August 27, 2026 | ransomlook | — |
| GPS Grothkopp und Partner | August 27, 2026 | ransomlook | — |
| Globalport Terminals | August 27, 2026 | ransomlook | — |
| Dotlines | August 27, 2026 | ransomlook | — |
| Kling Automaten | August 27, 2026 | ransomlook | — |
| Air International Thermal Systems | August 26, 2026 | ransomlook | — |
| Integrex RCM | August 26, 2026 | ransomlook | — |
| WireCo | August 26, 2026 | ransomlook | — |
| ATF | August 26, 2026 | ransomlook | — |
| Northern Leasing Systems | August 26, 2026 | ransomlook | — |
| California Truck Equipment | August 26, 2026 | ransomlook | — |
| Metal Conversions | August 26, 2026 | ransomlook | — |
| KenEp Resources | August 26, 2026 | ransomlook | — |
| Sanatorio Modelo de Caseros | August 26, 2026 | ransomlook | — |
| AGROLAND S.A. | August 25, 2026 | ransomware_live | — |
| STRUCTURED SETTLEMENT CAPITAL LLC | August 25, 2026 | ransomware_live | — |
| SC PaderTeG Cabluri Electrice | August 25, 2026 | ransomware_live | — |
| Brazosport College | August 25, 2026 | ransomlook | — |
| A&E + SMA Design | August 24, 2026 | ransomware_live | — |
| Coldfish Seafood | August 24, 2026 | ransomware_live | — |
| Consultores de Seguros | August 24, 2026 | ransomware_live | — |
| Black Cat Engineering & Construction WLL | August 23, 2026 | ransomware_live | — |
| Difor | August 23, 2026 | ransomware_live | — |
| Clear Align | August 23, 2026 | ransomware_live | — |
| Aurore Development S.p.A. | August 23, 2026 | ransomware_live | — |
| Studio BOLDRIN PAOLO | August 23, 2026 | ransomware_live | — |
| Tecnici Associati STP | August 23, 2026 | ransomware_live | — |
| Euroflora srl | August 23, 2026 | ransomware_live | — |
| S.E.M.P. s.r.l. | August 23, 2026 | ransomware_live | — |
| Professional | August 21, 2026 | ransomware_live | — |
| Blake Services | August 21, 2026 | ransomware_live | — |
| The Pendas Law Firm | August 21, 2026 | ransomware_live | — |
| Gindre India | August 21, 2026 | ransomware_live | — |
| Cinépolis | August 21, 2026 | ransomware_live | — |
| iPic | August 21, 2026 | ransomware_live | — |
| Quaker State Mexico | August 21, 2026 | ransomware_live | — |
| Trends And Concepts | August 20, 2026 | ransomware_live | — |
| Provite | August 20, 2026 | ransomware_live | — |
| Questronix | August 20, 2026 | ransomware_live | — |
| Integraduanas | August 19, 2026 | ransomware_live | — |
| Smart Energies | August 19, 2026 | ransomware_live | — |
| Medochemie | August 19, 2026 | ransomware_live | — |
| Philippe Hottinguer Finance | August 19, 2026 | ransomware_live | — |
| InVentry | August 19, 2026 | ransomware_live | — |
| WIS LOGISTICS | August 19, 2026 | ransomware_live | — |
| Movitecnica | August 19, 2026 | ransomware_live | — |
| Constructora Jimenez | August 19, 2026 | ransomware_live | — |
| Estech | August 19, 2026 | ransomware_live | — |
| Thrifty Building Supply | August 19, 2026 | ransomware_live | — |
| Semana | August 19, 2026 | ransomware_live | — |
| Berlin Brandenburgische Wohnungsbaugenossenschaft | August 18, 2026 | ransomware_live | — |
| EmpireWorks | August 17, 2026 | ransomware_live | — |
| The University of the West Indies | August 17, 2026 | ransomware_live | — |
| White-Daters & Associates, Inc | August 17, 2026 | ransomware_live | — |
| GSW Gemeinschaftsstadtwerke GmbH | August 17, 2026 | ransomware_live | — |
| Double H Equipment | August 16, 2026 | ransomware_live | — |
| ASCII Group | August 16, 2026 | ransomware_live | — |
| Arnall Golden Gregory | August 16, 2026 | ransomware_live | — |
| Zanichelli | August 16, 2026 | ransomware_live | — |
| Botek | August 16, 2026 | ransomware_live | — |
| Loescher editore Torino | August 16, 2026 | ransomware_live | — |
Page 1 of 23Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).